For audit and internal control
External partner IDs always come up in ISMS and J-SOX audits. Tactna records every event from request to deletion, detects inactivity, and locks automatically. Review runs and results are kept as evidence, and audit-ready reports export in one click.
Customers
Problem
Every audit starts with gathering.
Reviewing external IDs means, once a year, collecting per-app user lists into a spreadsheet, asking partners, and waiting for replies. Approval evidence lives in request emails, deletion records in a shared-folder ledger. Just making it presentable to an auditor takes days.
How it is solved
Send the spreadsheet, wait, reconcile.
Always current by last login. IDs past the threshold are auto-locked and the partner is asked.
Auto Lifecycle (idle-ID detection) ── Auto-lock and staged deletion→
Gather request emails, spreadsheets, and app logs.
Requests, approvals, changes, deletions in one log. Append-only, tamper-proof.
Shape the gathered material by hand.
Review results, lock/delete history, and policy changes exported in one click.
A day in that job
Run an Audit Run in the console. The status of 128 teams and 3,842 IDs is fixed, and 212 IDs inactive for 90 days are listed for locking. Who ran it and when is recorded.
No spreadsheets to send. No replies to chase.
Partner admins answer the confirmation in the Portal. 37 "left" go to scheduled deletion, 160 "active" are re-enabled. The 15 unanswered are scheduled for deletion after the deadline.
Partners decide, and the decision is recorded.
Export the audit report for a period. Review results, lock and delete history, and policy changes in one document. Follow-up questions are answered by searching the Activity Log.
No more days of prep.
Customers
Distributor onboarding went from weeks to immediate. The 30% zombie accounts were wiped out, and user-management work fell 70%.
FAQ
Every request, approval, add, change, lock, delete, and policy change; Audit Run records and results; partners' confirmation answers. Filter by period, team, and event and export as CSV and PDF.
Append-only; nothing can be edited or deleted. Retention is 1 to 7 years depending on plan.
Unanswered past the deadline goes into scheduled deletion. The deadline is 7 to 60 days, and the non-response itself is recorded.
Employees are IGA's scope, external partners are Tactna's, and each produces its own evidence. Tactna's reports explain external ID governance on their own.
