MY-Identity | Memority Documentation

Identity Governance and Administration

Regain control of every digital identity, from onboarding to offboarding, across every population.

MY-Identity is Memority's Identity Governance and Administration (IGA) offering. It manages the lifecycle and access rights of every identity type, automates your identity processes, and gives you continuous, auditable proof of compliance, even in complex hybrid environments.

MY-Identity is the Govern layer of the Identity Factory: the foundation that access control (MY-Access and MY-Keys) and identity visibility (MY-Discovery) build on.
See The 360° Identity Factory for the full picture.

How MY-Identity addresses the three IAM challenges

Identity-first security architectures. MY-Identity governs every identity and every assignment continuously, and records every operation as compliance evidence aligned with NIS2, DORA, GDPR, SOX, and ISO 27001. Compliance stops being a periodic effort and becomes a continuous state.
Frictionless user journeys. Memority automates Joiner, Mover, and Leaver events, opens self-registration to external populations, and lets users request access themselves through multi-level approval workflows. Users get access when they need it, and administrators stop managing tickets.
Business agility. Memority delivers 95% of your IAM logic through configuration rather than code. You configure object types, lifecycles, workflows, and assignment rules in the administration portal, then promote them across environments. You deploy new populations, applications, and rules without an IT project.

Core capabilities

Automated Joiner/Mover/Leaver (JML)

Authoritative sources such as your HRIS, CRM, and ERP trigger real-time, bidirectional lifecycle automation. Memority creates, updates, and deactivates identities and their assignments as employment events occur, following the identity lifecycle that you configure for each object type. Standard events need no manual intervention from IT.

Registration flows

Configurable self-registration journeys bring partners, contractors, and consumers under governance from their first interaction. You define the validation steps and the progressive profile enrichment for each population.

Role model and assignment rules

A single role model governs every link between an identity and a resource: application access, administration rights, and physical or material assignments alike.

Direct and requestable assignment. Administrators assign roles, or users request them through approval workflows.
Automatic assignment rules. Memority derives roles from identity attributes and organizational data, then assigns or revokes them as that data changes.
Dimensions. Contextual parameters refine the scope of a role and enable attribute-driven derivation at scale.
Organizational scoping. You publish roles to specific organizations, so each entity sees and manages only its own perimeter.

One model, whether you configure it fine-grained or coarse-grained, covers the access patterns that RBAC, ABAC, and organization-based approaches typically address, without three separate engines to maintain.

Segregation of duties (SoD)

The dynamic SoD engine prevents toxic combinations of rights. Rules operate at role level and at fine-grained entitlement level, and Memority evaluates them continuously rather than at audit time. This supports your SOX, ISO 27001, and DORA compliance.

Rights certification

Scheduled recertification campaigns generate review tasks for managers and role owners, who validate or revoke each assignment directly in the portal. You configure the scope, the approval workflow, and the deadlines, and reviewers can delegate the review itself. Every campaign result stays traceable for audit.

Delegated administration

Distribute identity administration to HR teams, business managers, or regional administrators, with configurable boundaries and full traceability. Memority supports more than 14 levels of hierarchical delegation in production.

Self-service and workflows

Users request access, track their requests, and reset their passwords themselves in the Functional Portal. The integrated workflow engine drives multi-level approvals with configurable escalation rules and deadline management, and it records every decision in the audit trail.

Account discovery, reconciliation, and data quality

Memority reconciles its repository against your connected systems continuously, so the identities it governs stay aligned with what actually exists. The Account Discovery Task scans those systems, matches every account it finds against a governed identity, and surfaces what shouldn't be there:

Orphan accounts. The task flags accounts that match no active owner, so you can remediate them before they become an attack path.
Dormant access. Out-of-the-box reports cross-reference identities, applications, and last authentication date to reveal access that nobody uses.
Incomplete or inconsistent records. The identity data quality reports catch records that don't match your model.

Flagged accounts feed into the standard request and workflow mechanisms, with full traceability.

This covers the systems that you connect to Memority. For visibility beyond that perimeter, including shadow SaaS and accounts created outside IAM workflows entirely, see MY-Discovery.

Non-human identity lifecycle

The same governance model applies to non-human identities: service accounts, machine-to-machine credentials, and connected devices. Each one gets its own object type, lifecycle, and owner.

One physical person can hold several distinct digital identities, and Memority governs each of them separately within a single repository. The same relationship model covers sponsor and ownership links, and the accountability chains between human and non-human identities.

Real-time provisioning and synchronization

Rights changes propagate immediately to your target systems, on-premises and in the cloud, through native connectors and synchronization flows. Target systems always reflect the source of truth, and Memority logs every provisioning operation for reporting.

Integration with authoritative sources

MY-Identity adapts to your existing information system as a consumer, a provider, or a consolidated repository:

Connect authoritative sources and target systems, such as your HRIS, CRM, ERP, and directories, through native connectors.
Ingest data through flat files, native connectors, or REST APIs.
Integrate several sources at once through custom interfaces.

User interfaces

You operate MY-Identity in the Memority Functional Portal, which serves end users, functional administrators, and help desk teams, and you configure it in the Technical Administration Portal.

See Memority Portals for a detailed description of both portals, and High Level of Configurability for technical administration.