Access Management
Just-in-Time access management
Configure Just-in-Time access to automatically provision and revoke user entitlements.
Granting permanent access to every application an employee touches is a security risk your team shouldn't have to carry. Just-in-Time (JIT) access lets you define exactly how long a user can hold an entitlement — and automatically revokes it when that window closes. No manual deprovisioning. No forgotten access hanging around after a project ends.
How it works
When creating an access policy, you can now set a maximum access duration for any entitlement. Once a request is approved through your normal workflow, Atomicwork's IGA agent provisions the entitlement, records the expiry timestamp, and deprovisions the access once the window closes. The agent has an hourly scheduled run to ensure that access is deprovisioned in a timely manner.
Configuring JIT access
-
Navigate to the Duration step when creating or editing an access policy, and select Just-in-time.
-
Set your desired duration presets (e.g., 6 hours, 1 day) and toggle Allow access extension requests from expiry notifications if you want users to be able to request more time. The minimum duration is 6 hours (industry standard).