← Back to all sparks
Z

Zluri

FINANCE
Velocity2.5

Zluri moves access duration from a request field to a rule the admin controls.

identity-governancesaas-managementaccess-reviewsapprovalsigadeprovisioning
Current state
Zluri continues to build out its identity governance and SaaS management platform, with recent work concentrated on access requests, approvals, and certifications. It has extended approver actions into Slack and email, refreshed the Groups module, and reworked how certifications are created and scoped. The newest release turns access duration itself into policy: an automation rule can now impose a fixed lifetime on every request it governs, overriding whatever the requester asked for.
Where it's heading
The product is maturing its IGA surface incrementally rather than pivoting, but the direction within that is consistent: each release moves a decision from an individual to a rule. Approver notes captured context that used to live in someone's head, user-based reviews let one scope replace app-by-app setup, and admin-enforced duration takes the last free-text field in the request flow and makes it configurable centrally. Existing rules keep following the requester's duration until changed, so adoption is opt-in.
Prediction
Expect the same enforced-versus-requested pattern to reach the other request fields admins currently cannot constrain, and the duration banner and notification labelling to become the template for showing which parts of a request were organization-set.

Recent moves

  1. 2d ago

    Admin-enforced access duration for Deprovisioning

    Automation rules gain an End access after control with two modes: a fixed duration from minutes to years that applies regardless of what the requester enters, or the existing requester-set behaviour. Requesters, approvers and notifications see the applied duration marked as organization enforced. It is the governance-by-rule pattern of the last several releases applied to the one field that was still left to the person asking.

    View source ↗
  2. 1mo ago

    Approver Notes from Slack Notifications

    Approvers can now attach a note when deciding an access request from a Slack notification, captured in the request's changelog. It closes the loop after June's email-notes feature, giving approvals the same context regardless of channel.

    View source ↗
  3. 2mo ago

    Approver Notes from Email Notifications

    The same note-on-decision capability delivered for email approvals a month earlier — part of a deliberate push to make approver context consistent across every notification surface.

    View source ↗
  4. 2mo ago

    Groups Module Enhancements

    The Groups module moves to Zluri's updated table experience and gains dedicated group-users and group-applications views, aligning it with the rest of the platform and surfacing membership and app links in context.

    View source ↗
  5. 4mo ago

    User-Based Access Reviews

    Access reviews can now start from users, not only apps or groups, with population criteria and exclusion rules. It adds a review-scoping dimension that rounds out the certification model.

    View source ↗
  6. 5mo ago

    Access Certification Creation Revamp

    Certification setup collapses into a single guided flow with shared defaults and per-entity overrides, replacing app-by-app configuration. A meaningful UX overhaul that lowers the effort of standing up reviews.

    View source ↗