Saviynt

Saviynt is an Identity Governance and Administration (IGA) platform that helps organizations manage user identities, access rights, and compliance across cloud and on-prem environments.

Integrating Saviynt as a Policy Information Point (PIP) allows PlainID to retrieve real-time identity data to support authorization decisions. This integration allows PlainID to enforce dynamic, policy-based access control by evaluating who the identity is, what they are trying to access, and the context of the access request.

This ensures that PlainID’s policies are always informed by the latest attributes, roles, and entitlements, enhancing security, governance, and compliance.

This integration is established through a connection between PlainID and Saviynt repositories, where PlainID retrieves identity attributes and entitlement data in real time whenever an access request occurs.

The PlainID PIP Service dynamically queries Saviynt to fetch the latest user attributes, roles, and entitlements, ensuring that policy-based access control (PBAC) decisions are always based on the most up-to-date identity data.

The PlainID Policy Decision Point (PDP) then evaluates this data to enforce PlainID’s Policy-Based Access Control (PBAC), determining whether to grant or restrict user access.

1. A user accesses the application.
2. After authenticating the user, the application makes an access request to the PlainID Platform.
3. PlainID Platform fetches the user attributes and entitlements from Saviynt, evaluates the retrieved data against PlainID’s predefined policies, and makes the access decision accordingly.
4. The response of what the user can access is sent back to the application.