What KuppingerCole Says

KuppingerCole’s research emphasizes that modern identity security cannot be effectively delivered through isolated IAM components operating independently. In its analysis, the firm highlights the need for an Identity Fabric, a unified, policy-driven architectural foundation that brings access management, identity governance, privileged access, and risk intelligence together into a single, cohesive layer.

KuppingerCole further underscores that identity must function as infrastructure, enabling shared context, continuous enforcement, and real-time risk awareness across both cloud and on-prem environments. From this perspective, fragmented tools and stitched integrations increase operational complexity, weaken governance, and delay effective security response. This interpretation closely aligns with the principles of Cybersecurity-as-an-Infrastructure (CSaaI), where identity is treated not as a bolt-on control or periodic process, but as a foundational system that operates continuously, and at enterprise scale.