IGA: Internal Identities Are a Given, External Ones Are the Real Challenge – But True Security Requires Both

Klaus Tietze

Information Security Manager, ARCA-Consult

Detlef Sturm

Senior Business Consultant & Product Evangelist

In today’s digital landscape, managing who has access to what – and when – is vital to organizational security. While internal identity governance is often well established, external identities such as contractors, partners, and service providers can present hidden risks if not properly managed.

Find out more

This on-demand webinar explores how Identity Governance & Administration (IGA) can be extended to manage both internal and external identities with confidence and compliance.

What You'll Learn:

The Hidden Risks of External Identities: Why managing third-party identities is more complex – and more critical – than ever.
Regulatory Compliance & Audit Readiness: Understand how frameworks like NIS-2, DORA, and TISAX impact identity management requirements for external actors.
Best Practices in Authorization Design: Should external users inherit internal roles, or is a separate role model safer? We explore practical approaches.
Data Gaps & Documentation Challenges: How to maintain oversight when external identity data doesn’t live in your HR system.
Contractual Complexity: Addressing varied contract types (e.g., service, freelance, temporary) in a unified IGA model.

Why Watch This Recording?

Whether you’re in IT security, compliance, or identity governance, this session offers strategic insights and actionable takeaways that will help your organization strengthen its identity posture – beyond employees.

Don’t miss your chance to build a more secure and compliant IGA framework – on your own schedule.

Speakers

Klaus Tietze

Information Security Manager, ARCA-Consult

For over 20 years, Klaus Tietze has been deeply involved in the implementation of Information Security Management Systems (ISMS). His focus is on combining security requirements with efficient application, ensuring the "meaningful implementation" of regulatory and legal requirements for companies.

As a Managing Consultant, he possesses extensive knowledge and practical experience in specialized areas of rights management, including identity access, high-privileged access, and SIEM management. Klaus Tietze has significantly supported clients ranging from SMEs to large corporations in implementing BAIT, VAIT, and KAIT, as well as achieving TISAX® certification.

Detlef Sturm

Senior Business Consultant & Product Evangelist

Detlef Sturm, Senior Business Consultant and Product Evangelist at Beta Systems, has more than 20 years of experience in the field of Identity and Access Management (IAM). Among other things, he was responsible for the development of Access Intelligence solutions. His current focus is on access design, particularly in the areas of role mining and role engineering.

Further Resources

Webinar

Practical NIS-2 Requirements for Critical Infrastructure Operators in Public Services

The NIS-2 Directive significantly tightens cybersecurity requirements for operators of critical infrastructure and essential public services across the EU ‒ including energy, water supply, and municipal utilities. But what does this mean in practice for organizations affected today? This on-demand webinar shows you exactly how to interpret and implement NIS-2 requirements effectively.

Watch webinar

Webinar

Action Over Planning – IAM Project Management Tips and Insights (DE)

Identity and Access Management (IAM) isn’t just an IT initiative – it’s a strategic enabler of security, operational efficiency, and compliance in modern digital businesses. Yet too many IAM projects stall before they begin: over-planning, uncertain priorities, regulatory complexity, and limited resources can slow progress and undermine results.

Watch webinar

Blog Article

How to Create a SCIM 2.0 Server Configuration by Hand

Setting up SCIM 2.0 server configuration endpoints manually can seem intimidating at first, but it doesn’t have to be. In this guide, we walk you through the process step by step to easily create the technical definitions for your ServiceProviderConfig, ResourceTypes, and Schemas endpoints matching your application’s capabilities. And the best part? You can validate your configuration using our SCIM 2.0 Schema Checker, helping you catch errors early and ensure full compliance with the SCIM specification.

Read article