Often, corporate identity governance and administration (IGA) and access governance programs focus on individual business applications, like Oracle, SAP, or Salesforce. Organizations build robust controls to ensure separation of duties (SoD) within these applications.