Behavior Driven Governance (BDG)

Out of the box feature

Behavior Driven Governance provides organizations continuous visibility into what access rights are being used, if any, and by whom.

Behavior Driven Governance enables organizations to easily enforce the principle of least privilege and reduce vulnerabilities, recertification fatigue and licensing costs associated with underutilized resources. In addition, Behavior Driven Governance assists administrators and application owners with notifications and actions related to entitlements that are rarely or never used. This out of the box feature strengthens security and compliance adherence and reduces administrative workload and costs. Behavior Driven Governance allows you to:

1. Use access insights in OneLogin to inform governance policy decisions in Identity Manager
2. Analyze access frequency and user location taken from OneLogin and use them to automatically determine access rights & entitlements in Identity Manager via policy
3. Recommend removal of unused entitlements to reduce vulnerabilities

One Identity Manager evaluates event data, including application access frequency. It correlates any associated accounts and entitlements and then, using an attestation, it provides the user’s manager or responsible party the opportunity to revoke access that may be unnecessary due to lack of application use.

If you are using One Identity Manager 9.0, you will require a Solution Accelerator, accessible via GitHub, to enable Behavior Driven Governance.

Top level benefits:

1. Full visibility into which entitlements are being used and how they are being used
2. Ability to recommend removal of unused entitlements to reduce vulnerabilities
3. Governance and reduced risk by revoking standing privilege
4. Better application management, cost controls and usage monitoring