{"id":1774,"date":"2026-07-23T09:32:56","date_gmt":"2026-07-23T07:32:56","guid":{"rendered":"https:\/\/iamfactory.de\/nicht-kategorisiert\/iam-on-premises-or-saas-a-comparison-of-operating-models\/"},"modified":"2026-07-27T09:41:08","modified_gmt":"2026-07-27T07:41:08","slug":"iam-on-premises-or-saas-a-comparison-of-operating-models","status":"publish","type":"post","link":"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/","title":{"rendered":"IAM: On-Premises or SaaS? A Comparison of Operating Models"},"content":{"rendered":"<p>[et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#04092a&#8221; use_background_color_gradient=&#8221;on&#8221; background_color_gradient_stops=&#8221;rgba(4,9,42,0.71) 0%|rgba(4,9,42,0.7) 100%&#8221; background_color_gradient_overlays_image=&#8221;on&#8221; background_image=&#8221;https:\/\/iamfactory.de\/wp-content\/uploads\/2025\/09\/case-studies_header.webp&#8221; background_position=&#8221;center_left&#8221; custom_padding=&#8221;100px||150px||false|false&#8221; bottom_divider_style=&#8221;asymmetric4&#8243; bottom_divider_color=&#8221;#dfe4e8&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row column_structure=&#8221;2_3,1_3&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;2_3&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_post_title meta=&#8221;off&#8221; featured_image=&#8221;off&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; title_font=&#8221;Hanken-Grotesk_bold||||||||&#8221; title_text_color=&#8221;#FFFFFF&#8221; title_font_size=&#8221;60px&#8221; title_letter_spacing=&#8221;1px&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_post_title][\/et_pb_column][et_pb_column type=&#8221;1_3&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; next_background_color=&#8221;#ffffff&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#dfe4e8&#8243; bottom_divider_style=&#8221;asymmetric4&#8243; bottom_divider_height=&#8221;50px&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row column_structure=&#8221;3_5,2_5&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;3_5&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; border_width_right=&#8221;1px&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;|23px||||&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">IT infrastructure has more in common with real estate than you might think. Both require constant maintenance, both consume resources\u2014and for both, the process begins with a fundamental question: build it yourself or have it operated by someone else? This article breaks down the costs, using current labor market figures, regulatory requirements, and a look at what\u2019s often missing from decision-making documents.  <\/p>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=&#8221;2_5&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 ez-toc-wrap-left counter-flat ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Inhaltsverzeichnis<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#A_Comparison_for_IT_Decision-Makers\" >A Comparison for IT Decision-Makers<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#1_Two_Worlds_A_Direct_Comparison_of_On-Premises_vs_SaaS\" >1. Two Worlds: A Direct Comparison of On-Premises vs. SaaS<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#On-Premises_Full_Control_Full_Effort\" >On-Premises: Full Control, Full Effort<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#SaaS_Get_Started_Faster_Reduce_the_Burden_Long-Term\" >SaaS: Get Started Faster, Reduce the Burden Long-Term<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#2_What_On-Premises_Operations_Really_Require\" >2. What On-Premises Operations Really Require<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#The_staffing_problem_Specialists_who_are_hard_to_find\" >The staffing problem: Specialists who are hard to find<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#When_five_people_have_to_handle_everything\" >When five people have to handle everything<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#The_Identity_Lifecycle_Where_Most_Errors_Occur\" >The Identity Lifecycle: Where Most Errors Occur<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#What_happens_if_the_IAM_expert_resigns\" >What happens if the IAM expert resigns?<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#Compliance_The_regulatory_landscape_isnt_getting_any_easier\" >Compliance: The regulatory landscape isn&#8217;t getting any easier<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#3_Getting_Results_Faster_The_MVP_Approach\" >3. Getting Results Faster: The MVP Approach<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#Proof_of_Concept_PoC_Instead_of_a_Large-Scale_Project\" >Proof of Concept (PoC) Instead of a Large-Scale Project<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#4_Why_now_and_why_specifically_for_these_industries\" >4. Why now, and why specifically for these industries?<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#Demo_Request\" >Demo Request<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/iamfactory.de\/en\/update-log\/iam-on-premises-or-saas-a-comparison-of-operating-models\/#Experience_IAM_Factory_in_Action\" >Experience IAM Factory in Action<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"A_Comparison_for_IT_Decision-Makers\"><\/span>A Comparison for IT Decision-Makers<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;||3px|||&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">Last week, I met with the IT director of a medium-sized city government. 4,500 employees, 120 specialized systems, a five-person IT team. He said something we hear time and again in projects: \u201cWe know we need an IAM. We just don\u2019t know if we can afford it.\u201d He wasn\u2019t referring to the money. He was referring to the people needed to keep such a system running.    <\/p>\n<p style=\"text-align: justify;\">This article is the first in a multi-part series for anyone facing exactly this decision.<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"1_Two_Worlds_A_Direct_Comparison_of_On-Premises_vs_SaaS\"><\/span>1. Two Worlds: A Direct Comparison of On-Premises vs. SaaS<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">Imagine you\u2019re building a house. With an on-premises solution, you buy the lot, plan the construction, hire contractors, and then handle every repair yourself\u2014from a leaky faucet to a new roof. With SaaS, you move into a professionally managed building: you can use everything right away, the property management company handles maintenance and upgrades, and you focus on your core business. Yes, you aren\u2019t building equity, but you also aren\u2019t tying up capital or an entire team in building systems.    <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; hover_enabled=&#8221;0&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221; sticky_enabled=&#8221;0&#8243;]<\/p>\n<h3><span class=\"ez-toc-section\" id=\"On-Premises_Full_Control_Full_Effort\"><\/span><strong>On-Premises: Full Control, Full Effort<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">Organizations that run IAM on their own infrastructure retain maximum control over data, configuration, and architecture. For certain scenarios, this is the right approach: for example, in highly regulated industries such as the financial sector, which must operate completely isolated from the Internet. <\/p>\n<p style=\"text-align: justify;\">The downside is often glossed over in decision-making documents. Hardware, licenses, network, and data center capacities must be procured and financed before even the first identity can be created. Every release update and every security patch is the organization\u2019s own responsibility. And then there are the connectors: interfaces to HR systems, directory services, cloud platforms, and line-of-business applications must be developed, tested, and maintained in-house. The complexity grows with every integration, and with it, the risk that something will be overlooked.    <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; hover_enabled=&#8221;0&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221; sticky_enabled=&#8221;0&#8243;]<\/p>\n<h3><span class=\"ez-toc-section\" id=\"SaaS_Get_Started_Faster_Reduce_the_Burden_Long-Term\"><\/span><strong>SaaS: Get Started Faster, Reduce the Burden Long-Term<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">An IAM solution delivered as Software as a Service shifts the operational burden to the provider. The organization uses a professionally managed platform and focuses on the business aspects: What roles do we need? What approval processes apply? Which systems need to be integrated?   <\/p>\n<p style=\"text-align: justify;\">At first glance, the math is simple: no upfront investment in infrastructure, predictable monthly costs, automatic updates from the provider, and scalability without the need to purchase hardware. Monitoring, backup, and disaster recovery are included in the service. Professional security management in accordance with ISO\/IEC 27001 is part of the service offering.  <\/p>\n<p style=\"text-align: justify;\">That sounds straightforward, but it\u2019s not quite that simple. Relying on a single provider requires trust and contractual safeguards. Ongoing subscription costs add up over the years. Not every SaaS provider allows for deep, customer-specific customization. A stable internet connection is a prerequisite, and the issue of data location must be clarified, especially for regulated industries.    <\/p>\n<p style=\"text-align: justify;\">When it comes to IAM in particular, a good SaaS provider not only handles the operation of the platform but also maintains the connectors, implements release updates, and adapts to new interface versions of the target systems. In our projects, we see time and again that it is precisely these tasks that tie up the most personnel resources when managed in-house\u2014not the major architectural decisions, but the ongoing day-to-day maintenance.  <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; next_background_color=&#8221;#ffffff&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#dfe4e8&#8243; use_background_color_gradient=&#8221;on&#8221; background_color_gradient_direction=&#8221;91deg&#8221; background_color_gradient_stops=&#8221;rgba(4,9,42,0.78) 48%|rgba(4,9,42,0.39) 100%&#8221; background_color_gradient_overlays_image=&#8221;on&#8221; background_image=&#8221;https:\/\/iamfactory.de\/wp-content\/uploads\/2025\/09\/Demoanfrage.webp&#8221; background_position=&#8221;center_right&#8221; top_divider_style=&#8221;asymmetric4&#8243; top_divider_color=&#8221;#ffffff&#8221; top_divider_height=&#8221;50px&#8221; top_divider_flip=&#8221;vertical&#8221; top_divider_height_tablet=&#8221;50px&#8221; top_divider_height_phone=&#8221;50px&#8221; top_divider_height_last_edited=&#8221;on|phone&#8221; bottom_divider_style=&#8221;asymmetric4&#8243; bottom_divider_height=&#8221;50px&#8221; border_color_bottom=&#8221;#0433d1&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;50px||50px||false|false&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk_bold||||||||&#8221; text_text_color=&#8221;#FFFFFF&#8221; text_font_size=&#8221;35px&#8221; text_letter_spacing=&#8221;1px&#8221; header_text_align=&#8221;center&#8221; text_orientation=&#8221;center&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p>Digital Sovereignty at IAM Factory<\/p>\n<p>[\/et_pb_text][et_pb_button button_url=&#8221;@ET-DC@eyJkeW5hbWljIjp0cnVlLCJjb250ZW50IjoicG9zdF9saW5rX3VybF9wYWdlIiwic2V0dGluZ3MiOnsicG9zdF9pZCI6Ijc5IiwiZW5hYmxlX2h0bWwiOiJvZmYifX0=@&#8221; button_text=&#8221;IAM as a Service&#8221; button_alignment=&#8221;center&#8221; _builder_version=&#8221;4.27.4&#8243; _dynamic_attributes=&#8221;button_url&#8221; _module_preset=&#8221;default&#8221; custom_button=&#8221;on&#8221; button_text_size=&#8221;16px&#8221; button_text_color=&#8221;#FFFFFF&#8221; button_bg_color=&#8221;#0433d1&#8243; button_bg_use_color_gradient=&#8221;on&#8221; button_bg_color_gradient_direction=&#8221;135deg&#8221; button_bg_color_gradient_stops=&#8221;#3fced0 0%|#0433d1 0%&#8221; button_border_width=&#8221;0px&#8221; button_border_radius=&#8221;10px&#8221; button_font=&#8221;|700||on|||||&#8221; button_use_icon=&#8221;off&#8221; custom_padding=&#8221;10px|20px|10px|20px|true|true&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221; button_bg_color__hover_enabled=&#8221;on|hover&#8221; button_bg_color_gradient_stops__hover=&#8221;#0433d1 100%|#3fced0 100%&#8221; button_bg_use_color_gradient__hover=&#8221;on&#8221; button_letter_spacing__hover_enabled=&#8221;off|hover&#8221; button_letter_spacing__hover=&#8221;1px&#8221; button_bg_color__hover=&#8221;#0433d1&#8243;][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"2_What_On-Premises_Operations_Really_Require\"><\/span>2. What On-Premises Operations Really Require<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">In theory, any organization can operate an IAM system on its own. In practice, however, this fails surprisingly often\u2014not because of a lack of will, but because of a lack of the necessary prerequisites. Operating the system in-house requires a number of success factors that simply aren\u2019t present in many organizations.  <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; hover_enabled=&#8221;0&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221; sticky_enabled=&#8221;0&#8243;]<\/p>\n<h3><span class=\"ez-toc-section\" id=\"The_staffing_problem_Specialists_who_are_hard_to_find\"><\/span><strong>The staffing problem: Specialists who are hard to find<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">IAM is not a side job. Its operation requires specialists who are well-versed in identity modeling, connector development, role management, workflow design, privileged access management, and compliance requirements. These are not generic IT administrators. These are specialists with a rare skill set at the intersection of IT security, directory services, HR processes, and application integration.   <\/p>\n<p style=\"text-align: justify;\">The job market simply can&#8217;t keep up. According to a 2025 Bitkom study, the German IT job market has approximately 109,000 unfilled IT positions. Although this represents a cyclical decline from the 149,000 recorded in 2023, 79 percent of companies expect the shortage to worsen further. In the field of cybersecurity, according to a PwC Strategy&#038; study (2025), nine out of ten organizations report massive recruitment problems, and in the public sector, according to the dbb Monitor 2026, there is a shortage of around 600,000 employees needed to perform tasks efficiently.   <\/p>\n<p style=\"text-align: justify;\">Even if suitable candidates were available, organizations in the public sector, healthcare, and higher education\u2014which operate under rigid pay scales (TV\u00f6D, TV-L, AVR)\u2014are competing against the private sector. An experienced IAM specialist earns significantly more than the E12 upper limit in those sectors. You know the result: positions remain unfilled for months or years, existing staff are overburdened, and the IAM project makes no progress.  <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h4>How SaaS Is Changing Things Here<\/h4>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<blockquote>\n<p style=\"text-align: justify;\">The provider supplies the IAM expertise. The internal IT department defines the business processes but does not operate the technical platform. Instead of three to five dedicated IAM specialists, one or two business contacts are sufficient, and the issue of compensation shifts to the service provider, who can recruit on the open market and deploy specialists across multiple clients.  <\/p>\n<\/blockquote>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h3><span class=\"ez-toc-section\" id=\"When_five_people_have_to_handle_everything\"><\/span><strong>When five people have to handle everything<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">In many medium-sized hospitals, city governments, or universities, the entire IT department consists of just a handful of employees. These teams are already struggling to maintain the day-to-day operations of the network, workstations, servers, and line-of-business applications. If the IT department doesn\u2019t even have the capacity to handle printer support, who is supposed to operate an IAM system with dozens of connectors?  <\/p>\n<p style=\"text-align: justify;\">With SaaS, the provider handles the day-to-day IAM operations: monitoring, patching, backups, connector maintenance, and release updates. This takes the burden off the internal team, allowing it to focus on business-specific management\u2014tasks that can only be performed internally. <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h3><span class=\"ez-toc-section\" id=\"The_Identity_Lifecycle_Where_Most_Errors_Occur\"><\/span><strong>The Identity Lifecycle: Where Most Errors Occur<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">An often-overlooked aspect: When an employee leaves the organization or changes roles, their access rights must be promptly and correctly adjusted or revoked across dozens of systems\u2014from email accounts and VPN access to industry-specific business processes. When managed in-house, this requires manual coordination between HR, IT operations, and line departments. Errors lead to so-called \u201corphan accounts\u201d: abandoned accounts that continue to grant access and pose a permanent security risk.   <\/p>\n<p style=\"text-align: justify;\">Added to this is the challenge of identity correlation. If the same person exists in multiple systems (HR system, Active Directory, cloud directory, SAP), the platform must reliably recognize that they are one and the same person. Otherwise, duplicates or conflicting permissions will result.  <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h4>Do you know how many orphaned accounts exist in your system?<\/h4>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<blockquote>\n<p>A professional SaaS platform automates the entire identity lifecycle end-to-end. Proven correlation rules prevent duplicates, and automated deactivation processes bridge the gap between HR notifications and the actual revocation of access rights. When managed in-house, this is often done using spreadsheets and email\u2014a process that is error-prone, time-consuming, and hardly audit-proof.  <\/p>\n<\/blockquote>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;27px|||||&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h3><span class=\"ez-toc-section\" id=\"What_happens_if_the_IAM_expert_resigns\"><\/span><strong>What happens if the IAM expert resigns?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">We know of an organization where a single employee built and maintained the entire IAM system for seven years. When he left, it took the team four months just to understand the documentation. It took nine months to find a replacement. In the meantime, no new connectors were integrated, no interfaces were updated, and no security patches were applied.   <\/p>\n<p style=\"text-align: justify;\">This is not an isolated case. An IAM system is not a one-time project. It evolves, grows, and changes over the years. If you operate it yourself, you\u2019ll need succession planning, documentation, and knowledge transfer. With a SaaS provider, operational continuity is institutionally embedded: with teams rather than individuals, defined processes, and contractually guaranteed service levels.    <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;27px|||||&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Compliance_The_regulatory_landscape_isnt_getting_any_easier\"><\/span><strong>Compliance: The regulatory landscape isn&#8217;t getting any easier<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">NIS2, BSI IT-Grundschutz, GDPR, industry-specific requirements such as the Patient Data Protection Act, or the OZG 2.0 requirements for digital administrative services, including open standards. An in-house IAM system must independently implement, document, and demonstrate compliance with all of these requirements during audits. <\/p>\n<p style=\"text-align: justify;\">Regular access certifications are particularly time-consuming: At least once a year, managers must review and confirm all of their employees\u2019 access rights. Similarly, the segregation of duties must be monitored automatically to ensure that no one is assigned roles that involve conflicts of interest\u2014such as combining invoice verification and payment approval in a single position. <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h4>How SaaS Is Changing Things Here<\/h4>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<blockquote>\n<p style=\"text-align: justify;\">A professional SaaS provider holds the necessary certifications (ISO 27001, ISO 27017, ISO 27018) and integrates compliance requirements into its standard processes. Certification campaigns are orchestrated automatically, SoD conflicts are detected in real time, and complete audit trails provide the evidence in the format that auditors expect. <\/p>\n<\/blockquote>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; next_background_color=&#8221;#ffffff&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#dfe4e8&#8243; use_background_color_gradient=&#8221;on&#8221; background_color_gradient_direction=&#8221;91deg&#8221; background_color_gradient_stops=&#8221;rgba(4,9,42,0.78) 48%|rgba(4,9,42,0.39) 100%&#8221; background_color_gradient_overlays_image=&#8221;on&#8221; background_image=&#8221;https:\/\/iamfactory.de\/wp-content\/uploads\/2025\/09\/Demoanfrage.webp&#8221; background_position=&#8221;center_right&#8221; top_divider_style=&#8221;asymmetric4&#8243; top_divider_color=&#8221;#ffffff&#8221; top_divider_height=&#8221;50px&#8221; top_divider_flip=&#8221;vertical&#8221; top_divider_height_tablet=&#8221;50px&#8221; top_divider_height_phone=&#8221;50px&#8221; top_divider_height_last_edited=&#8221;on|phone&#8221; bottom_divider_style=&#8221;asymmetric4&#8243; bottom_divider_height=&#8221;50px&#8221; border_color_bottom=&#8221;#0433d1&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;50px||50px||false|false&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk_bold||||||||&#8221; text_text_color=&#8221;#FFFFFF&#8221; text_font_size=&#8221;35px&#8221; text_letter_spacing=&#8221;1px&#8221; header_text_align=&#8221;center&#8221; text_orientation=&#8221;center&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p>Digital Sovereignty at IAM Factory<\/p>\n<p>[\/et_pb_text][et_pb_button button_url=&#8221;@ET-DC@eyJkeW5hbWljIjp0cnVlLCJjb250ZW50IjoicG9zdF9saW5rX3VybF9wYWdlIiwic2V0dGluZ3MiOnsicG9zdF9pZCI6Ijc5IiwiZW5hYmxlX2h0bWwiOiJvZmYifX0=@&#8221; button_text=&#8221;IAM as a Service&#8221; button_alignment=&#8221;center&#8221; _builder_version=&#8221;4.27.4&#8243; _dynamic_attributes=&#8221;button_url&#8221; _module_preset=&#8221;default&#8221; custom_button=&#8221;on&#8221; button_text_size=&#8221;16px&#8221; button_text_color=&#8221;#FFFFFF&#8221; button_bg_color=&#8221;#0433d1&#8243; button_bg_use_color_gradient=&#8221;on&#8221; button_bg_color_gradient_direction=&#8221;135deg&#8221; button_bg_color_gradient_stops=&#8221;#3fced0 0%|#0433d1 0%&#8221; button_border_width=&#8221;0px&#8221; button_border_radius=&#8221;10px&#8221; button_font=&#8221;|700||on|||||&#8221; button_use_icon=&#8221;off&#8221; custom_padding=&#8221;10px|20px|10px|20px|true|true&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221; button_bg_color__hover_enabled=&#8221;on|hover&#8221; button_bg_color_gradient_stops__hover=&#8221;#0433d1 100%|#3fced0 100%&#8221; button_bg_use_color_gradient__hover=&#8221;on&#8221; button_letter_spacing__hover_enabled=&#8221;off|hover&#8221; button_letter_spacing__hover=&#8221;1px&#8221; button_bg_color__hover=&#8221;#0433d1&#8243;][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"3_Getting_Results_Faster_The_MVP_Approach\"><\/span>3. Getting Results Faster: The MVP Approach<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">Many IAM projects fail not because of technical issues, but because of their duration. A typical large-scale IAM project begins with a months-long requirements analysis, followed by software selection, infrastructure setup, implementation, testing, and go-live. It takes 18 to 24 months\u2014and sometimes significantly longer\u2014to go from the initial idea to live operation. During this time, budgets grow, stakeholders\u2019 patience wanes, and requirements shift.   <\/p>\n<p style=\"text-align: justify;\">The key lies in the opposite approach: a Minimum Viable Product (MVP) that quickly brings the most important IAM functions online and is then expanded in stages.<\/p>\n<p style=\"text-align: justify;\">What does this look like in practice? A preconfigured SaaS platform provides an industry-proven framework: user types for typical roles (employees, external users, trainees, students), predefined Joiner-Mover-Leaver processes, a proven role model based on systematic role mining, standard connectors for Active Directory, LDAP, Microsoft Entra ID, SAP HCM, or HR systems, self-service functions for password resets and access requests, as well as basic compliance features such as audit logging, access certification, and segregation of duties. <\/p>\n<p style=\"text-align: justify;\">Experience has shown that this preconfiguration covers the vast majority of requirements. Instead of starting from scratch, the implementation builds on a foundation that has been refined through real-world projects. Customization is limited to what is truly unique to each client: the specific organizational structure, the specific business processes, and the internal approval rules.  <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;27px|||||&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Proof_of_Concept_PoC_Instead_of_a_Large-Scale_Project\"><\/span><strong>Proof of Concept (PoC) Instead of a Large-Scale Project<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">The lowest-risk way to get started is through a structured proof of concept. Within a few weeks, a real environment identical to the production environment is set up, rather than a sales-oriented demo. An HR system is connected as the source, a directory service is configured as the destination, and automated provisioning begins. The organization can verify for itself whether the solution delivers what it promises before entering into a long-term contract.   <\/p>\n<p style=\"text-align: justify;\">This approach reduces three key risks simultaneously: financial risk through manageable initial costs, technical risk through validation within the organization\u2019s own system environment, and organizational risk through rapid, visible results that win over stakeholders.<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"4_Why_now_and_why_specifically_for_these_industries\"><\/span>4. Why now, and why specifically for these industries?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">Three sectors are under particular pressure to professionalize their identity management.<\/p>\n<p style=\"text-align: justify;\">Under NIS2 and KRITIS requirements, healthcare organizations are legally required to demonstrably raise their IT security to a professional level. Centralized IAM is not an optional add-on in this context, but a mandatory requirement. <\/p>\n<p style=\"text-align: justify;\">Higher education institutions manage a unique level of complexity: thousands of students, rotating faculty members, and a heterogeneous IT landscape comprising campus management, directory services, and federated authentication (Shibboleth, DFN-AAI). Added to this is the requirement that faculty and researchers be able to access resources at other institutions using their home institution\u2019s credentials. <\/p>\n<p style=\"text-align: justify;\">Under the OZG 2.0, local governments must provide digital citizen services and, to that end, establish a secure, legally compliant identity management system for thousands of employees, external contractors, and elected officials.<\/p>\n<p style=\"text-align: justify;\">All three sectors have one thing in common: IT teams are small, salary ranges are capped by collective bargaining agreements, and the workload is high. If you\u2019re thinking, \u201cThat doesn\u2019t apply to us,\u201d take a moment to consider how many of your IT employees will be retiring in the next five years. It is precisely in this scenario that IAM as a managed service delivers the greatest value.  <\/p>\n<p style=\"text-align: justify;\">The question is no longer whether an organization needs a professional IAM solution, as regulatory requirements and the threat landscape leave no room for doubt. The question is what the path to achieving this looks like and whether an organization has to go it alone. <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;||0px|||&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">This article is the first of four parts. The next ones will explore the topic further\u2014including topics such as a cruise ship and a lunar mission. After all, how collaboration works during day-to-day operations and why IAM projects require a different planning approach than traditional IT projects each deserve their own closer look.  <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;||0px|||&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p>Would you like to find out what an IAM rollout might look like in your organization? Schedule a free consultation using the <a href=\"https:\/\/iamfactory.de\/en\/software-as-a-service\/#demoanfrage\">contact form<\/a> \u201430 minutes, no slide-heavy presentation, just a concrete assessment of your situation. <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; next_background_color=&#8221;#04092a&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#dfe4e8&#8243; use_background_color_gradient=&#8221;on&#8221; background_color_gradient_direction=&#8221;91deg&#8221; background_color_gradient_stops=&#8221;rgba(4,9,42,0.78) 48%|rgba(4,9,42,0.39) 100%&#8221; background_color_gradient_overlays_image=&#8221;on&#8221; background_image=&#8221;https:\/\/iamfactory.de\/wp-content\/uploads\/2025\/09\/Demoanfrage.webp&#8221; background_position=&#8221;center_right&#8221; custom_margin=&#8221;||-100px||false|false&#8221; custom_padding=&#8221;||80px||false|false&#8221; top_divider_style=&#8221;asymmetric4&#8243; top_divider_color=&#8221;#FFFFFF&#8221; top_divider_height=&#8221;50px&#8221; top_divider_flip=&#8221;vertical&#8221; bottom_divider_style=&#8221;asymmetric4&#8243; background_last_edited=&#8221;off|phone&#8221; background_horizontal_offset_phone=&#8221;0%&#8221; border_color_bottom=&#8221;#0433d1&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; custom_margin=&#8221;|auto|-38px|auto||&#8221; custom_padding=&#8221;80px||33px||false|false&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_text_align=&#8221;left&#8221; header_2_text_color=&#8221;#FFFFFF&#8221; header_2_font_size=&#8221;35px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_text_align=&#8221;left&#8221; header_3_text_color=&#8221;#FFFFFF&#8221; header_3_font_size=&#8221;30px&#8221; custom_margin=&#8221;||30px||false|false&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Demo_Request\"><\/span><b>Demo Request<\/b><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Experience_IAM_Factory_in_Action\"><\/span>Experience IAM Factory in Action<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; text_text_color=&#8221;#FFFFFF&#8221; custom_margin=&#8221;||45px||false|false&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p>During a one-on-one presentation, we\u2019ll show you<br \/>how our modular <b>Software as a Service solution<\/b> works in practice.<\/p>\n<p><span data-contrast=\"auto\" lang=\"DE-DE\" class=\"TextRun Highlight SCXW129060329 BCX8\"><span class=\"NormalTextRun SCXW129060329 BCX8\">Experience modern identity and access management in action and get answers to your questions.<\/span><\/span><\/p>\n<p>[\/et_pb_text][et_pb_button button_url=&#8221;https:\/\/iamfactory.de\/en\/software-as-a-service\/#demo-request&#8221; button_text=&#8221;Schedule an appointment&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; custom_button=&#8221;on&#8221; button_text_size=&#8221;16px&#8221; button_text_color=&#8221;#FFFFFF&#8221; button_bg_use_color_gradient=&#8221;on&#8221; button_bg_color_gradient_direction=&#8221;135deg&#8221; button_bg_color_gradient_stops=&#8221;#3fced0 0%|#0433d1 0%&#8221; button_border_width=&#8221;0px&#8221; button_border_radius=&#8221;10px&#8221; button_font=&#8221;|700||on|||||&#8221; button_use_icon=&#8221;off&#8221; custom_padding=&#8221;10px|20px|10px|20px|true|true&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221; button_bg_color__hover_enabled=&#8221;on|hover&#8221; button_bg_color_gradient_stops__hover=&#8221;#0433d1 100%|#3fced0 100%&#8221; button_bg_use_color_gradient__hover=&#8221;on&#8221; button_letter_spacing__hover_enabled=&#8221;off|hover&#8221; button_letter_spacing__hover=&#8221;1px&#8221;][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>IT infrastructure has more in common with real estate than you might think.<\/p>\n<p>Both require ongoing maintenance, both consume resources, and both start with a fundamental question: Build it yourself or have it operated by someone else? This article breaks down the costs, using current labor market data, regulatory requirements, and a look at what\u2019s often missing from decision-making documents. <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[14,13],"tags":[],"class_list":["post-1774","post","type-post","status-publish","format-standard","hentry","category-news","category-update-log"],"_links":{"self":[{"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/posts\/1774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/comments?post=1774"}],"version-history":[{"count":5,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/posts\/1774\/revisions"}],"predecessor-version":[{"id":1855,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/posts\/1774\/revisions\/1855"}],"wp:attachment":[{"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/media?parent=1774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/categories?post=1774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/tags?post=1774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}