Identity access management (IAM) is a critical requirement for effective cloud computing, regardless of the type of cloud model involved (e.g., SaaS, IaaS or PaaS). As more and more IT services are moved to the cloud, determining who has access to which cloud service is vital to ensuring privacy and security, as well as the overall performance of the cloud model. It also can be complex, especially when multiple cloud models delivering multiple cloud services are involved.

Cloud IAM services benefit both the cloud service provider and the cloud tenant alike. They are an essential value driver for each. For example, for the provider, IAM increases productivity and the level of manageability within the cloud, as well as security and compliance.

For the tenant, IAM enables more applications and services to be moved to the cloud, generating efficiencies and savings. IAM via the cloud also provides the tenant with shared access to best-in-class IAM solutions at a lower cost.

CGI, for example, as a cloud provider invests in cloud IAM solutions and workflows based on leading industry standards and best practices, which all of our cloud clients benefit from for much less cost than had they made the investment themselves. Without a doubt, cloud IAM services are a win-win situation for both cloud providers and tenants.

Achieving all of these IAM advantages in the cloud, however, is difficult, if not impossible, without an effective IAM governance model. Establishing the right IAM strategy and solution is only the first step toward IAM cloud success. Even if you’ve put in place the best strategy and solution, neither can bring the full IAM benefits you’re expecting without strong IAM governance.

An IAM governance model provides a structure for defining and clarifying IAM roles and responsibilities, as well as corresponding accountabilities. It also enhances decision-making and program management. Some of the key benefits of such a model include the following:

• Drives alignment with other strategic initiatives and programs
• Provides effective and timely decision-making and escalation processes
• Provides clear communications to internal and external program stakeholders
• Recognizes and manages interdependencies across initiatives and stakeholders

 IAM capabilities and offerings continue to evolve and vary greatly among cloud providers, making it difficult to evaluate and choose the right provider for your organization. One key factor to consider is whether the provider has a proven IAM governance model. Beyond the bells and whistles of the latest IAM technologies and solutions is the need for strong governance and, if a provider doesn’t have a solid governance model and track record, it’s time to consider other providers.