RSA Governance & Lifecycle review
A compliance-focused platform for access governance, lifecycle automation, and auditability.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
RSA Governance & Lifecycle is an identity governance and administration platform for government agencies, financial institutions, and other high-assurance organizations. It manages access across cloud, hybrid, and on-premises environments, with support for access reviews, certifications, attestations, role management, provisioning, deprovisioning, policy enforcement, compliance reporting, risk analytics, and audit trails. The platform is available through web and self-hosted deployments, and RSA also describes cloud-managed, private-cloud, hybrid, and air-gapped deployment options.
For governance teams, the feature depth is the main reason to consider it. Joiner-mover-leaver automation connects identity changes to provisioning and deprovisioning, while role-based access controls, role mining, and segregation-of-duties enforcement address policy management. Risk dashboards, a risk engine, compliance audit reporting, and analytics support ongoing oversight. Gamification for access reviews and audit trails for access changes add review workflow and accountability features. SAML 2.0 is listed as a supported SSO protocol.
The ecosystem includes ServiceNow, Cherwell, BMC Helix ITSM, TOPdesk, Jira, Active Directory, Salesforce, and AWS IAM, along with a connector and web-service integration framework. According to the published pricing model, organizations contact sales rather than select a public paid tier, and the product does not offer a free plan. RSA publishes a 14-day self-guided trial. Choose RSA Governance & Lifecycle when regulated access control, lifecycle automation, role analysis, and audit reporting are central requirements. Organizations seeking a smaller, simpler access-review tool may prefer a narrower alternative.
RSA Governance & Lifecycle pros and cons
- Where it wins
- Automates joiner-mover-leaver provisioning and deprovisioning
- Combines certifications, SoD enforcement, reporting, and audit trails
- Supports web and self-hosted deployments with ITSM connectors
- Where it doesn't
- Paid pricing requires contact with sales
- No free plan is offered
- Its governance scope may exceed simpler access-review needs
RSA Governance & Lifecycle fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update