Identity governance, from the field.

IGA Field Notes is an independent practitioner publication by Abhishek Chowdhury. It is about the decisions behind identity governance: who gets access, how that access changes, what evidence proves the controls worked, and where the model breaks down.

I work in identity and access management, especially the integration layer that connects identity systems to the applications and processes they are meant to govern. The writing here comes from that practical perspective: architecture patterns, access reviews, federation, non-human identities, and the operational gaps that clean diagrams tend to leave out.

The field is also expanding. AI agents can read data, call applications, and delegate work to other agents. That makes identity, authority, and auditability central design questions rather than supporting controls. IGA Field Notes follows that boundary between established governance and agentic identity as it develops.

Across all of these topics, the goal is the same: make the real security decision easier to see.

You can follow my work on LinkedIn .