My-Discovery

Extended identity visibility

Every identity, including the ones your IAM missed.

Integration status: MY-Discovery is built on the Memority platform and is being fully embedded within the Identity Factory during 2026. It operates today as a complementary offering with full workflow integration with MY-Identity, and can also be deployed alongside a third-party IAM solution.

Why MY-Discovery

A traditional IAM governs what it has been told about. Everything else falls through the cracks: undeclared applications, accounts created outside formal workflows, residual access after departures, and external tokens.

My-Discovery reveals what falls through the cracks. It doesn't replace your IAM. It extends it to your actual perimeter.

How MY-Discovery addresses the 3 IAM challenges

• Identity-first security architectures. Every blind spot removed is one less attack vector. My-Discovery continuously surfaces orphan accounts, residual access, shadow SaaS, and external tokens, and reconciles them with known identities. No blind spots across the entire identity perimeter.

• Frictionless user journeys. End users monitor and validate their own application access through a self-service portal. Application owners handle certification directly, with no IT bottleneck. Access reviews cover the entire application landscape, not just declared apps.

• Business agility. The agentless architecture means no software to deploy on target systems and no infrastructure overhead. The cartography updates itself continuously. Deploy in days, govern the invisible within weeks.

Core capabilities

Continuous application detection

My-Discovery continuously maps every application running across your organization, including those that business teams adopted without IT approval:

• Native connectors to your data sources: Microsoft 365, Google Workspace, Microsoft Entra ID, and Okta

• Detection of all applications, including those outside your SSO perimeter

• Coverage of OAuth connections and direct access outside your IAM perimeter

• A unified view of your actual IT footprint versus your declared one

Detection of orphan accounts and residual access

My-Discovery identifies accounts created outside formal IAM workflows:

• Orphan accounts still active in your environment

• Access rights never revoked after a departure or role change

• External identities tied to known employees but invisible to governance

• Automatic reconciliation with known identities in My-Identity

Every discovered account becomes a governable account.

Agentless architecture

My-Discovery requires no software agent on target systems. It maintains a continuous cartography without infrastructure overhead, and deploys in weeks, not months.

Certification workflows and campaigns

Extend your certification process to the full application landscape:

• Assign application owners to discovered SaaS applications

• Launch recertification campaigns directly from the portal

• Require usage justification per user and per application

• Track pending actions and requests in real time

Managers and application owners handle reviews without IT involvement.

Self-service portal

Every end user gets a role-appropriate view:

• Full visibility into their associated applications and accounts

• Validation and justification of their own SaaS usage

• Fewer IT support tickets for access queries

Read more: Self-service features

Advanced reporting and dashboards

Get full visibility on your real exposure:

• Unknown applications and shadow SaaS

• Unmanaged accounts and residual access rights

• Application footprints per user and per business unit

• Correlation with My-Identity governance data

What MY-Discovery delivers