Zygon

Zygon is an Identity Governance and Administration (IGA) platform designed for IT and security teams managing cloud identities across modern SaaS-heavy environments. The platform addresses "access sprawl" — the fragmentation of user identities across managed and unmanaged identity providers, shadow IT applications, and untracked accounts. Core capabilities include automated account provisioning and deprovisioning (including for apps without SCIM support), access request workflows, access reviews, and delegation of application ownership. Zygon integrates with major identity providers such as Microsoft Entra, Okta, and Google Workspace, and extends coverage to shadow IT through multi-source automatic discovery. A browser extension called "Copilot" allows manual import of user lists from SaaS applications that lack API support. The platform features a workflow engine that automates approval and delegation flows, supports Just-in-Time (JIT) provisioning, and connects with collaboration tools such as Slack and Microsoft Teams to surface access management workflows directly to end users. Security alerting capabilities allow teams to detect risky authentication behaviors — such as missing MFA or SSO — and engage users directly for remediation. Zygon also supports compliance use cases, including ISO 27001 and SOC 2, through access review automation and identity inventory management. The platform positions itself as lightweight and fast to deploy, targeting IT, security, GRC, and IAM teams, particularly in organizations with large and complex SaaS application stacks. A supplementary resource called the "Auto-Provisioning Atlas" provides a public database of authentication and provisioning methods for SaaS applications.