Govern identities in Disconnected
applications, with Torch.

Identity governance has a dirty secret: most of your applications aren't governed at all. Torch helps connect any app to your identity governance program — without the pain of lengthy integration projects or breaking connectors.

Your IGA covers 10% of your apps. The other 90% runs on tickets and spreadsheets.

Mainframes, homegrown tools, the long tail of SaaS — they live outside your identity program. Manual identity governance and lengthy onboarding projects drag down productivity and create security risks.

Introducing Torch

Fully govern any application,
with the help of AI.

A new connectivity framework for IGA: build connectors to any application in minutes, not months, monitor connector health, and ship fixes quickly.

Automate provisioning and account reconciliation

JML workflows execute inside the application — not as tickets in someone's queue. Accounts and entitlements stay continuously reconciled, so what your IGA sees matches what's actually in the app.

Integrate in minutes, fix automatically

Connectors are built by Torch's agents from documentation, screenshots, or a runbook — not a six-month services engagement. When the target app changes, Torch detects the drift and recovers before it breaks.

Deterministic by default, agentic at the edges

Predictable execution paths for the work that's predictable. AI handles drift, recovery, and interfaces that move — never the decision about who gets access.

How it works

Any application. Connected to the stack you already run.

01

Capture the app

Point Torch at an app. It ingests docs, APIs, screens, and existing scripts to understand what governance hooks exist.

02

Generate the connector

Torch builds a working connector in minutes, with test users and clear success criteria. Your team reviews and approves before anything ships to production.

Explore the Identity Studio
03

Run and self-heal

Torch watches every connector in production. When schemas change or auth drifts, it diagnoses the break and proposes the fix — usually before anyone notices.

Torch puts IGA app onboarding on autopilot.

90%
reduction in manual IAM operations
100%
coverage across disconnected applications
24/7
monitoring and fixing your integrations

100% application coverage.

If it runs in your business, Torch can govern it.

Vendor-managed SaaS

Modern APIs, SCIM endpoints, MFA flows — handled cleanly, alongside everything else.

For example:
Mainframe applications

Green-screen terminals, AS/400, decades-old auth models — governed the same as anything else.

For example:
Enterprise applications

The packaged platforms running your business — ERP, HRIS, GRC — connected without custom integration projects.

For example:
Home-grown applications

Internal tools, legacy systems, the app one team built and never documented.

Windows client applications

Thick clients and desktop tools that never had an API to begin with.

For example:
Your application?

If it isn't on this list, it probably belongs here too. Tell us what you're running.

Run your access reviews on Torch.

You don't need a separate IGA to certify access. Use Torch alongside the platform you already run — or on its own. Same connectivity layer, full audit evidence, no second tool to license or maintain.
Access reviews & certifications
Campaign-based reviews with full audit evidence — across every app you connect, not just the ones already in your IGA.
Joiner / Mover / Leaver
Automated lifecycle workflows across every app you connect.
Business roles
Model access by role, function, or team. Map entitlements once, reuse everywhere.