#428 - Modernizing IGA with Thomas Zarnhofer

#428 - Modernizing IGA with Thomas Zarnhofer

Source: YouTube · Identity at the Center · published Jun 16, 2026 · 42:11

Identity & Access Management
No ratings yet Log in to rate
Transcript Available
Description

Thomas Zarnhofer explains that migrating from legacy on-premise Identity Governance and Administration (IGA) to cloud-based solutions requires a fundamental shift from contract-based to person-based identity models, rigorous data cleanup, and phased adoption to ensure success.

Key Takeaways:
• Shifting from contract-based to person-based identity models resolves security issues and orphaned accounts caused by legacy systems 02:30
• Organizations must consolidate master data sources and perform thorough data cleanup before implementation to prevent bad data from derailing projects 06:15
• The migration follows three phases: Foundation (model/data setup), Migration (phased cutover), and Adoption (process optimization) 12:45
• Partnering with HR is critical to demonstrate how IGA automation generates value for the broader digital ecosystem, overcoming initial resistance 05:40
• AI will revolutionize IGA through predictive role provisioning and natural language chatbots to simplify access requests for business users 18:20

Zarnhofer’s insights provide a practical roadmap for IGA modernization, emphasizing that success depends on rigorous data governance, challenging legacy assumptions, and leveraging emerging technologies to enhance user experience.

Sources:

  • 00:10 Introduction of hosts and EIC 2026 context
  • 02:30 Discussion on identity model transformation from contracts to persons
  • 05:40 Strategies for partnering with HR to demonstrate value
  • 06:15 Importance of data cleanup and

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

[music] >> This is Identity at the Center. >> [music] >> Welcome to the Identity at the Center podcast. I'm Jeff and that's Jim. Hey Jim. >> Hey Jeff, how are you? >> Oh, not so bad. Yourself? >> Oh, fantastic, man. We're here at EIC 2026. This is the second podcast we're recording after I Identity Beer on Monday night. Uh since then, I've gone and had Vietnamese food in Germany. I love Vietnamese food. Love Germany. Obviously, I love my home country as well, but since I've been in Europe, I've been in France and Germany and man, the food is fantastic. >> Yeah, food's good. I would say I've not had quite the culinary experiences that you have, but I only just got to Germany here on Saturday night late. Today is Wednesday. I spent most of Sunday just kind of zoned out, recovering, sleeping,…