Blog

AI agent and generative artificial intelligence concept. Businessman using AI agents on screen, including chatbots, AI assistants, and data analytics tools on a laptop. LLM, Ai agentic workflows.

Inspired by the iconic Italian movie “Non ci resta che piangere” (“Nothing Left to Do But Cry”) by Roberto Benigni and Massimo Troisi, this article explores a new future of Identity Governance and Administration, one where AI Agents are among us. <h3>A Cultural Prologue: From Medieval Jokes to Digital Identity</h3> In the 1984 cult film “Non ci resta che piangere”, two modern Italians, Mario and Saverio, are mysteriously time-transported to Medieval (1492) Tuscany in Italy. They attempt to make sense of their new world and&nbsp;arrive at a small customs checkpoint. The guard asks them flatly: “Chi siete? Cosa portate? Un fiorino!” (Who are you? What are you carrying? One florin!). The line is repeated repeatedly, no matter what answer they give, summarizing the absurdity of bureaucracy and the struggle to explain one’s identity in unfamiliar systems. Today, in the world of digital identity and governance, we’re not that far off. <h3>Enter the AI Age Interrogation Age</h3> In the near future, organizations will not only manage human users, but also AI Agents. Intelligent, autonomous entities that act on behalf of people, systems, or themselves. These agents will be embedded in applications born on the LLM (Large Language Model), deeply integrated into the fabric of business workflows. The difference? When you ask an AI Agent “Who are you? Where are you going?”, it will answer clearly, verifiably, and transparently: <ul><li>Who they operate for (identity delegation, user or system context)</li><li>What data they access (datasets, APIs, scopes)</li><li>What tools they use (software components, integrated actions) </li></ul>Unlike today’s identity systems—where figuring out who a user is and what they do often involves stitching together data from multiple sources, AI Agents are by design auditable. They know who they are and what they do. This marks a fundamental shift in how we manage identity: conversational clarity on demand. <h3>IAM in the Age of AI Agents: Challenges and Opportunities </h3>Traditional IGA systems are not built for this hybrid world of Humans + Agents. They assume static identities, predefined roles, and human-readable audit trails. But AI Agents operate differently:<ul><li>They spin up and down dynamically</li><li>They inherit and transform access rights on the fly</li><li>They collaborate with other agents and humans in decentralized workflows</li><li>They make decisions, trigger actions, and learn over time </li></ul>This complexity introduces new challenges. <h3>How Iamones Leads the Way: Conversational IAM for a Hybrid Future </h3>At Iamones, we believe identity must evolve alongside intelligence. That’s why we’ve built Conversational IAM, a platform where reasoning, context, and interaction drive access decisions, not static rules alone. Using a combination of: <ul><li>LLM-native architecture</li><li>Reasoning engines that explain the “why”</li><li>Retrieval-Augmented Generation (RAG) for real-time context</li><li>Explainable policies that span humans and agents alike </li></ul>...our platform allows you to ask any identity, human or digital: "Who are you? What are you doing here? On whose behalf? With what permissions?" And get a truthful, traceable, and actionable answer. And prepare your organization for a future where not all identities wear badges.<h3>Conclusion: Identity as Conversation, Not Interrogation </h3>In 1492, Mario and Saverio faced a system that asked the same questions without ever truly listening to the answers. The real revolution isn't that agents can answer our questions, but that they change the nature of the questions themselves. No longer "Who are you?" as access control, but "What are you trying to achieve?" as the starting point for next-gen IGA. The florin? Finally, we can keep it in our pocket.

AI Agent: Who Are You? Where Are You Headed To? 1 Token

Businessperson shaking hand with digital partner over futuristic background.

Bologna, 15/05/2025 IAMONES, the conversational Identity &amp; Access Management platform powered by large language models, and Cyber Rating, a company specialized in cyber risk evaluation, are pleased to announce a new strategic partnership.The goal of this collaboration is to provide organizations with deeper, real-time insights into identity-related risks by combining IAMONES’ modern and intuitive approach to IAM with Cyber Rating’s expertise in cyber threat intelligence and risk profiling.A key focus of the partnership is the integration of User Credential Leak intelligence into the IAMONES platform.Thanks to this partnership, the platform will soon offer dynamic and real-time visibility into exposed credentials, allowing companies to respond faster and take immediate action on potential threats.This integration also includes identity risk intelligence data, enabling IAMONES to enrich its decision-making layer with contextual indicators of compromise, behavioral anomalies, and exposure scoring—bringing a new dimension of precision to identity risk management."In the current landscape, identity data is one of the most targeted assets," said Andrea Rossi, CEO of IAMONES. "Partnering with Cyber Rating enables us to go a step further in helping our customers stay ahead of risk, by enriching our Identity Graph with live breach intelligence."Stefano Fratepietro, CEO of Cyber Rating added: “IAMONES is reshaping how companies manage digital identity. We’re excited to contribute with our data and insights to strengthen their proactive and AI-driven approach.”As part of the collaboration, IAMONES and Cyber Rating will also work together on joint awareness initiatives, platform integrations, and co-branded reporting on identity-related risk trends.About CyberatingCyberating is an innovative Italian startup founded in October 2024 in Bologna by a team of cybersecurity experts with over two decades of experience. The company specializes in providing organizations with accurate assessments of their exposure to cyber risks through a proprietary rating system. This system enables businesses to evaluate and mitigate cybersecurity threats effectively.Utilizing its proprietary Cyber Risk Platform, Cyberating offers continuous monitoring and analysis of technical data to contextualize cyber risks. The platform supports both requested and unsolicited evaluations, providing stakeholders with transparent insights into an organization's cybersecurity posture. Additionally, Cyberating offers advisory services to help companies strengthen their cyber resilience.Cyberating aims to become the leading cybersecurity rating agency in Europe, offering objective and transparent evaluations to help organizations enhance their security strategies.<a data-mce-href="https://www.cyberating.it/" href="https://www.cyberating.it/" data-mce-selected="inline-boundary">www.cyberating.it</a>

IAMONES and Cyber Rating announce strategic partnership to enhance real-time identity risk insights

Hanging torn paper with new release word over blue background

<h3>🚀 New Release Alert:&nbsp; IAMONES just got more powerful </h3>With the latest release, our platform evolves from a smart conversational interface into a true operational layer for your identity governance processes.🔄 Introducing Request Management WorkflowNow you can not only ask about your identity landscape, but you can also act on it. The new workflow feature lets users request and revoke permissions or roles through a structured, policy-aware approval flow, all via natural language.Here’s what’s new:✅ Automated Risk Evaluation: Before any request proceeds, IAMONES checks for policy violations using its reasoning engine. High-risk requests are blocked. Others include a smart summary of potential risks to help approvers decide quickly and safely.✅ Dynamic, Role-Based Approval Flow: Whether the requester is a user, a manager, or an admin, IAMONES routes approvals intelligently: Managers auto-skip redundant steps. Admins get instant approval for clean requests. Risky cases escalate only when needed — no unnecessary bottlenecks.✅ Operational Simplicity, IGA Power: IAMONES now does what traditional IGA platforms do, only faster and more intuitively. We're not just surfacing insights; we're enabling actions. Approvals, removals, visibility: all in one place, and all just a question away.✅ Full Audit &amp; Transparency: Every step is logged. Every comment tracked. And everything searchable via plain language queries.With this release, IAMONES becomes your conversational command center for IAM, accelerating the most common governance tasks that used to slow you down in legacy IGA systems.🧠 Smarter decisions. ⚡ Faster execution. 💬 Natural language, real impact.👉 Want to see it live? Book a demo: <a href="https://iamones.ai/contact" data-mce-href="https://iamones.ai/contact">https://iamones.ai/contact</a>&nbsp;

IAMONES Becomes Fully Operational with Request Management Workflow

AI chatbot - Artificial Intelligence innovation digital concept

Today, the term AI Agent is gaining traction, but what exactly does it mean? It signals a move beyond AI that simply processes prompts to systems designed for autonomy and action. Unlike standard applications or even sophisticated LLMs, an AI Agent possesses the core capabilities to reason through problems, plan effective solutions, and utilize a toolkit of functions or APIs to interact with the environment. This capacity for independent operation makes them particularly powerful. Could AI Agents be the key to truly dynamic IAM? What is an AI Agent? More Than Just a Smart Chatbot First, let's clarify what we mean by an AI agent. It's more than just a system that responds to prompts. An AI agent is designed to be autonomous. It possesses the ability to:1. Reason: Analyze a goal or a situation; 2. Plan: Break down the goal into actionable steps; 3. Act: Execute those steps by interacting with its environment.Crucially, AI agents are equipped with a set of tools. These aren't physical tools but rather functions, API calls, database queries, or other capabilities that allow them to interact with other systems and data sources. The agent autonomously decides when and how to use these tools based on its reasoning process to achieve its objective.Agent vs. Prompt Chain: The Key Difference is Autonomy You might wonder how this differs from simply chaining prompts together. While you can create sequences where the output of one LLM prompt feeds into another or even use LLM outputs to generate code (like SQL queries) for external interaction, this approach lacks the core element of agentic AI: autonomous reasoning and tool selection. <ul><li>Prompt Chaining: Follows a more pre-defined path. The interaction logic is largely determined by the human designer chaining the prompts.</li><li>AI Agent: The LLM is in the driver's seat. It assesses the situation, reviews its available tools, decides the best course of action, executes it, observes the result, and then reasons about the next step. It has a holistic view and control over the process.</li></ul>Applying Agentic AI to IAM: A Workflow Revolution Now, let's bring this concept into the world of IAM. Consider the often complex and rigid nature of access request management and workflow implementation in traditional systems. Agentic AI offers a paradigm shift. Imagine defining complex access workflows using natural language. Instead of clicking through configuration menus, you could simply instruct the system: “Access requests for resources classified as "High Risk" require sequential approval. First, approval must be obtained from the requestor's direct manager. Second, if the manager approves, approval must be obtained from the designated Application Owner. Third, if the Application Owner also approves, final approval is required from the relevant Entitlement Owner associated with the specific access being requested”.An AI agent specifically designed for IAM could then:1. Understand &amp; Structure: Parse this natural language request, understand the intent, and structure the necessary workflow steps. 2. Reason &amp; Verify: Initiate a reasoning process. Who is the requestor? Is the request compliant with existing policies? Who is the designated manager? 3. Utilise Tools: Use its available tools (API calls, directory lookups) to:<ul><li>Verify the new requestor's details.</li><li>Identify the correct manager.</li><li>Check relevant security policies related to the requested access. </li></ul>4. Act &amp; Provision: Once all checks pass and approvals are secured, use another tool like an API call to your existing IGA platform to actually trigger the provisioning of the requested access rights. 5. Report: Confirm completion or report any issues encountered. Integrating Human Oversight: The Human-in-the-LoopOf course, not all IAM decisions can or should be fully automated. Many processes, particularly those involving high-risk access or periodic reviews, mandate human judgment and explicit approval. This is where the concept of "human-in-the-loop" becomes essential, and agentic AI is well-suited to accommodate it. Imagine an access review campaign or our previous high-risk access request workflow. When the AI agent reaches a pre-defined step that requires human intervention (like manager certification), its reasoning identifies this requirement. Instead of proceeding autonomously, the agent pauses the workflow. It can then utilize its tools to notify the designated human approver through appropriate channels (e.g., email or a notification in the IGA platform), providing them with the necessary context. The workflow remains suspended until the human provides their decision (approve, deny, revoke). Once the input is received, the agent resumes the workflow, incorporating the human decision into its next steps – either proceeding with provisioning/attestation, escalating, or closing the task based on the feedback received, and logging the entire interaction for audit purposes. This seamless integration ensures that automation boosts efficiency without bypassing critical human control points and compliance requirements.Why This Matters for IAM<ul><li>Efficiency: Automates complex decision-making and actions, speeding up processes.</li><li>Flexibility: Allows for dynamic workflows defined more easily.</li><li>User Experience: Enables natural language interfaces, simplifying tasks for managers and end-users.</li><li>Intelligence: Enhances workflow reasoning by incorporating natural language understanding and semantic analysis, enabling the agent to interpret complex instructions, policies, and context accurately during execution.</li></ul>Conclusion Agentic AI represents a significant step beyond simple LLM interactions. By granting AI the ability to reason, plan, and autonomously use tools, we unlock powerful new possibilities. In the IAM space, this could lead to more intelligent, efficient, and user-friendly ways to manage identities and access, transforming complex processes like workflow management into dynamic and flexible operations. The future of IAM looks increasingly autonomous and intelligent.

Reason, Plan, Act: Putting AI Agents to Work in IAM

The traditional organizational model in software development and IT consulting has long resembled a pyramid: a small layer of decision-makers and architects at the top, supported by middle management, and a broad base of developers executing the work. This structure worked well in a world where value is created primarily through manual coding and implementation. But with the rise of large language models (LLMs) and AI agents capable of reasoning, generating code, and automating tasks, the game is rapidly changing. We are now witnessing the emergence of a new model that resembles a diamond more closely. In this paradigm, the broadest layer of the organization is no longer at the bottom but in the middle. The core value creators are no longer just software developers but domain experts, knowledge workers, and AI engineers who translate complex expertise into structured prompts, tasks, and workflows for AI agents.<figure id="figure-n6w3941a6ym8pyx4cm"><img id="n6w3941a6ym8pyx4cm" src="https://cdn.durable.co/blocks/1f7JFu89rKTrgVHzurYGsUqAIGUgCbbIeB99ygH1rGRg6X0bvmybQygwVRc4ZwyD.png" alt="How AI reshapes the Organization of Software and IT Consulting companies (and not only…)" title="How AI reshapes the Organization of Software and IT Consulting companies (and not only…)" class="object-cover bg-gray-100 rounded-sm md:rounded-md lg:rounded-lg" style="aspect-ratio: 16/9; object-position: undefined undefined;" data-corners="default" data-aspect="16:9" data-caption="" data-positionx="undefined" data-positiony="undefined" data-fullwidth="false" data-mce-src="https://cdn.durable.co/blocks/1f7JFu89rKTrgVHzurYGsUqAIGUgCbbIeB99ygH1rGRg6X0bvmybQygwVRc4ZwyD.png" data-mce-style="aspect-ratio: 16/9; object-position: undefined undefined;"></figure>Knowledge and Natural Language become the New CodeIn the diamond model, the organization's foundation is deep domain knowledge: industry-specific insights, business logic, regulatory nuances, and strategic context. This knowledge is no longer "thrown over the wall" to developers. Instead, it's actively curated, structured, and encoded into prompts and data that can guide LLMs and AI agents.The traditional developer's role is evolving into something new: AI/LLM Engineers, who act as translators between human expertise and machine reasoning. They are responsible for transforming domain knowledge into instructions that LLM-powered systems can understand and execute effectively. They don't just write code, they design prompts, orchestrate agent workflows, and fine-tune outputs based on real-world feedback.The Diamond Structure: A New Division of LaborIn this new structure, the layers of the organization shift:<ul><li>Top: Strategic leadership and governance remain essential but now include broad and real knowledge of AI</li><li>Middle (Broadest Layer): A large, empowered group of domain experts and AI engineers who create, manage, and optimize knowledge flows. This is where innovation and value creation happen.</li><li>Bottom: A way smaller team for Traditional Coders and IT Operations.</li></ul>This model is not just about efficiency, it's about scaling intelligence. The impact on the Cybersecurity and IAM industriesAI will reshape our beloved Cyber and IAM industries as well.<ul><li>Software vendors: Hire people who know your domain and let them write very good documents, as Natural Language is the new code.</li><li>Consulting and system integrators: forget about hiring “juniors” and achieve your EBIT thanks to their endless dedication to the company. SOC L1 and L2? Gone. Junior Building connectors in IAM platforms? Gone.</li><li>Auditors, Risk &amp; Compliance Professionals: Get ready to Audit AI-based applications. It's better than 'traditionally software-coded' applications, believe me. Policies are in Natural Language, so get prepared to write clear documents that can be reasoned upon by Large Language Models.</li></ul>ConclusionThe transition from a pyramid to a diamond organization is more than a reorganization: it's a fundamental rethinking of how value is created in the age of AI. As knowledge and natural language become the new code, and AI agents take on increasing responsibility for reasoning and execution, organizations must embrace this shift or risk being left behind.

From Pyramids to Diamonds: How AI reshapes the Organization of Software and IT Consulting companies (and not only…)

Munich/Bologna, 6/03/2025 IAMONES announces signing a global partnership agreement with iC Consult, a world leader in IAM consulting, integration and managed services.This agreement, effective January 2025, marks a significant step in the collaboration between the two companies, which aims to provide AI-powered solutions for secure digital Identity Management on a global scale.Named "Rising Star" by KuppingerCole Analysts in December 2024, IAMONES focuses on erasing complexity in the Identity management domain through Natural Language. With his motto "Ask Anything, Configure everything using only your Mother Tongue", IAMONESvhas quickly gained recognition for its unique approach to using Large Language Models to meet the AI-modernization needs of big companies with legacy IGA solutions that are often complex to use and expensive to maintain. iC Consult is the trusted partner for Identity-driven Cybersecurity and Identity &amp; Management, offering over 25 years of industry-leading expertise. With a global team of 850+ professionals and a strong network of top-tier partners, iC Consult provides scalable, world-class identity solutions. The partnership between IAMONES and iC Consult aims to combine the agility and innovation of a pure-play "Born on the Cloud and LLM"start-up with an industry leader's expertise and established network. Through this collaboration, IAMONES will gain access to a global network of clients and partners, while iC Consult will enhance its offering with innovative solutions developed by IAMONES. "The collaboration with iC Consult represents an extraordinary opportunity to accelerate our growth and expand the impact of our Conversational IAM platform in the global market" said Andrea Rossi, CEO of IAMONES.&nbsp; "By combining our expertise, we will be able to offer a simpler and more reactive Identity-centric Security”."We are excited to welcome IAMONES into our global partner network" commented Andre Priebe, CTO of iC Consult. “GenAI is a game changer in the IT landscape, and we are committed to leveraging this incredible potential for our clients in a secure and reliable way. The collaboration with IAMONES allows us to make IAM more efficient and more secure".About iC Consult iC Consult is the world-leading independent consultancy, systems integrator, and managed services provider for identity-driven cybersecurity. Our team of over 850 experts is committed to delivering next-level solutions tailored to the unique needs of our clients worldwide. We achieve this by continuously driving innovation, leveraging cutting-edge technology, and partnering with leading identity and cybersecurity vendors, as well as renowned analyst firms.&nbsp;Identity is our specialty: Our end-to-end service portfolio covers all aspects of professional and managed services in identity security including advisory, architecture, implementation, integration, support, and operations. We help our clients navigate key initiatives such as zero trust, identity threat detection and response, IAM cloud migration, and more to ensure they stay ahead in cybersecurity. With a strong global presence spanning North America, Europe, Asia, and beyond, we ensure the security and expert management of digital identities for the world’s largest brands.&nbsp; <a data-mce-href="http://www.ic-consult.com" href="http://www.ic-consult.com">www.ic-consult.com</a>

iC Consult and IAMONES sign a Global Partnership to deliver AI-Innovation in Identity & Access Management (IAM)

iamones

IAMONES is an AI-native, conversational Identity & Access Management (IAM) platform. Our business is to remove the complexity that makes enterprise identity governance slow, expensive and inaccessible to the people who actually use it.

Our product is a software platform, delivered as a cloud service, that sits on top of the IAM and Identity Governance & Administration (IGA) systems an organization already owns — no rip-and-replace, no migration risk. It consolidates identities, entitlements and access data from across source systems into a single data model with a full historical timeline, and exposes it through a natural-language interface available in the customer's channel of choice (enterprise chatbot, Microsoft Teams, or an embedded web portal).

Key capabilities include:

Conversational access requests — business users describe what they need in everyday language; semantic search finds the right entitlements and indicates the likelihood of approval.
AI-assisted access reviews and certification campaigns — campaign managers configure and scope campaigns by asking; reviewers get context and recommendations to make better decisions.
Natural-language configuration and reporting — policies, workflows and reports are defined and modified conversationally, in any language, and remain directly readable by auditors.
Governance of AI agents — non-human identities and AI agents are modelled and governed alongside human users, where permission overlap creates hidden risk.

We serve mid-size and large enterprises in regulated and security-sensitive sectors, and work through a global partner ecosystem of IAM consulting and managed-service providers. Licensing is usage-based rather than per-seat, so cost scales with actual value delivered. IAMONES was recognized as a Rising Star in KuppingerCole Analysts' Identity Governance & Administration report.

Inter

Roboto

This website uses cookies. Please refer to the Privacy &amp; Cookie policy for more details.

Blog

AI Agent: Who Are You? Where Are You Headed To? 1 Token

IAMONES and Cyber Rating announce strategic partnership t...

IAMONES Becomes Fully Operational with Request Management...

Reason, Plan, Act: Putting AI Agents to Work in IAM

From Pyramids to Diamonds: How AI reshapes the Organizati...

iC Consult and IAMONES sign a Global Partnership to deliv...