Identity and Access MANAGEMENT LifeCycle Redesign

What is it?

UNCG is transitioning to a modern Identity and Access Management (IAM) approach that improves how we manage digital access across campus. 

IAM ensures the right people have the right access to the right systems at the right time. 

UNCG has selected SailPoint as the University’s Identity Governance and Administration platform. Before implementation begins, the University is formalizing lifecycle policies and governance to guide how identity and access decisions are made 

This initiative includes two major efforts that will run in parallel: 

• Lifecycle Policy Redesign – Defining how undergraduate students, graduate students, faculty, staff, affiliates, and sponsored users are onboarded, managed, and off boarded 
• IAM Governance Relaunch – Establishing clear ownership, decision-making authority, and accountability for identity and access decisions 

After these decisions are finalized, SailPoint will be implemented based on approved lifecycle and governance outcomes. 

Why are we doing it?

Identity decisions affect nearly every university function including academic continuity, research compliance, financial controls, institutional security, and user experience.  

Over time, lifecycle rules, role definitions, and access practices have evolved across systems and departments. In some cases: 

• Ownership of decisions has not been clearly defined 
• Similar populations are treated differently across systems 
• Exceptions are handled inconsistently 
• Technical teams have been left to interpret business rules 

IAM governance provides a structured forum for cross functional decision making. It ensures that: 

• Lifecycle stages and triggers are clearly defined 
• Authoritative data sources are identified and trusted 
• Role and affiliation definitions are consistent 
• Risk tolerance is understood and applied consistently 
• Decisions are documented and visible 

This work complements existing data governance, security, compliance, and ERP initiatives. It does not replace them. 

How Will I Be Impacted?

Most faculty, staff, and students will not see immediate changes. 

Over time, you may notice: 

• More consistent account activation when you join UNCG 
• Clearer, role-based access to systems 
• Defined access guardrails that help prevent over-provisioning 
• More timely removal of access when someone changes roles or leaves 
• Improved communication about access changes 

Lifecycle Policy Workshops 

UNCG will host structured workshops with stakeholders who understand key business processes. 

These sessions will focus on: 

• Defining lifecycle stages and access triggers 
• Clarifying ownership of lifecycle and role decisions 
• Identifying trusted data sources that drive onboarding and access 
• Reviewing common exceptions and pain points 
• Producing concise decision records for leadership review 

You do not need technical expertise to participate. You will be asked to represent how identity and access function in your area and where clarity is needed. 

IAM Governance Structure 

IAM governance will follow a structured model that includes: 

• A core steering group that provides continuity, prioritization, and decision support 
• Focused subcommittees for specific lifecycle, policy, or access topics 

Governance defines direction and institutional priorities. Operational teams execute implementation. 

This separation ensures: 

• Business leaders retain decision authority 
• Technical teams implement approved outcomes 
• Tradeoffs are evaluated transparently 
• IAM decisions reflect institutional priorities rather than technical convenience 

When Will This Be Implemented? 

This initiative will proceed in phases. 

Phase 0 Preparation 

• Stakeholder alignment 
• Identification of early lifecycle and ownership decisions 
• Draft governance charter 

Phase 1 Formation and Initial Decisions 

• Governance group convened 
• Initial lifecycle and role decisions documented 
• Decision records shared 

Phase 2 Expand and Normalize 

• Broader campus representation 
• Integration with procurement, compliance, and system onboarding processes 
• Regular governance cadence established 

Platform Implementation 

After lifecycle and governance decisions are approved, UNCG will implement SailPoint based on those outcomes. 

Specific implementation timelines will be shared as phases are finalized. 

What Do I Need to Do? 

At this time:

• No action is required for most campus users. 

If you are invited to participate in a lifecycle workshop, please: 

• Attend the scheduled session 
• Share how identity and access function in your area 
• Help clarify ownership, definitions, and recurring exceptions 
• Review and validate documented decisions