Glossary

Modeling segregation-of-duties (SoD) constraints in IGA, identifying which combinations of access shouldn't be held by the same person, so the access model enforces SoD rather than relying on after-the-fact review.

Segregation of duties prevents one person from holding combinations of access that enable fraud or error (e.g., requesting and approving the same payment). SoD modeling in IGA captures these constraints as policy: defined conflicting role pairs or entitlement combinations the system blocks at provisioning and flags during reviews. Done well, SoD is enforced by design rather than discovered in audits. It is an IGA practice closely tied to access certification and audit-driven risk reduction.

Introduced in: Identity Governance and Administration

No related terms linked yet.