> Auto-generated markdown. For the original HTML, request the same URL without `Accept: text/markdown`, removing any `.index.md` or `/index.md` suffix.
E-time | the software company
[Linkedin-in](https://www.linkedin.com/company/e-time-s-r-l-/) [Facebook-f](https://it-it.facebook.com/etime.engineering/) [Instagram](https://www.instagram.com/_etimesrl_/)
[](https://www.e-time.it/index.md)
# News
[](https://www.e-time.it/en/nis2-upcoming-deadlines-october-2026/index.md)
October 20, 2026by [user](https://www.e-time.it/en/author/carla/index.md)[News](https://www.e-time.it/en/category/news-en/index.md)[NIS2](https://www.e-time.it/en/category/nis2-en/index.md)
## [NIS2: Upcoming Deadlines and Requirements for October 2026](https://www.e-time.it/en/nis2-upcoming-deadlines-october-2026/index.md)
**INDEX**
1. [NIS2 Deadline of 31 October 2026: Which Entities Must Complete Compliance](#cosa)
2. [NIS2 Security Measures: Checks to Complete by October 2026](#qualefunzione)
3. [NIS2 After 31 October 2026: How ACN Inspections Work](#iga)
4. [Incomplete NIS2 Compliance: Fines, Responsibilities and Risks for Companies](#comp)
5. [NIS2 in 2027: Upcoming Deadlines and Requirements to Plan For](#inte)
## NIS2 Deadline of 31 October 2026: Which Entities Must Complete Compliance
**31 October 2026** represents a significant deadline for the first group of organisations included in the national NIS list in 2025. For these entities, the **18-month period** established for the adoption of **basic security measures** begins upon receipt of the individual communication sent by the [**National Cybersecurity Agency (ACN)**.](https://www.e-time.it/en/acn-portal-and-nis2-directive/index.md)
The legislation applies to public bodies and private companies operating in the **18 strategic sectors** identified by the directive, which meet the applicable size criteria — generally at least 50 employees or annual turnover exceeding €10 million — or provide certain digital services regardless of their size. Based on the relevance of their activities, organisations are classified as **essential or important entities**. The effects of NIS2 also extend to the **supply chain**: suppliers of the organisations concerned may be required to comply with specific security requirements. For entities included in the list in 2026, the deadline for implementing basic measures is instead set for **31 July 2027**.
### NIS2 Security Measures: Checks to Complete by October 2026
Ahead of the deadline, the organisations concerned must verify that they have effectively implemented the **basic security measures established by ACN Determination No. 379907/2025**. The level of requirements varies according to the classification: important entities are required to implement **37 measures comprising 87 requirements**, while essential entities must comply with **43 measures and 116 requirements**, as set out in Annexes 1 and 2, respectively.
The assessment must cover the **ten security areas identified in Article 24 of Legislative Decree No. 138/2024**. These include cybersecurity risk analysis and management, [**incident response, business continuity**](https://www.e-time.it/en/nis-2-cybersecurity-incidents/index.md) through business continuity and disaster recovery plans (BCP and DRP), supplier security, the protection of system development and maintenance activities, the assessment of the effectiveness of measures through audits and vulnerability assessments, staff training and cyber hygiene practices. The framework is completed by cryptography, human resources security and **access management, including the use of multi-factor authentication (MFA)**.
### NIS2 After 31 October 2026: How ACN Inspections Work
The deadline for adopting basic security measures does not mark the end of the NIS2 compliance process. After the deadline, organisations must be able to **maintain active controls, document the procedures adopted and demonstrate ongoing compliance with their obligations**. The **National Cybersecurity Agency (ACN)** carries out supervisory and verification activities in accordance with the procedures established for the different categories of entities.
The supervisory model distinguishes between essential entities, which are subject to proactive checks and periodic inspections, and important entities, which are primarily subject to subsequent checks and targeted supervisory activities. Inspections may concern the actual adequacy of security measures, the traceability of internal processes and the proper management and documentation of incident notifications. For organisations, this means preparing not only to meet the initial deadline, but also to **demonstrate the robustness of their cybersecurity management system**.
### Incomplete NIS2 Compliance: Fines, Responsibilities and Risks for Companies
Failure to comply with [**NIS2 requirements**](https://www.e-time.it/en/the-nis-2-directive-what-changes-in-security-management-for-companies/index.md) may result in significant financial and organisational consequences. **Legislative Decree No. 138/2024** establishes, in Article 38, the sanctions regime applicable to violations, with penalties varying according to the entity’s classification and the nature of the non-compliance.
For the most serious violations relating to governance, security measures and incident notification, **administrative fines** may reach up to **€10 million or 2% of annual worldwide turnover** for essential entities, and up to **€7 million or 1.4% of annual worldwide turnover** for important entities. In the cases provided for by law, measures may also be imposed on individuals holding senior management positions, including temporary suspension from their duties. These consequences are accompanied by potential commercial impacts: an insufficient level of security may jeopardise relationships with customers and partners, particularly in supply chains where **NIS2 compliance is a relevant requirement for supplier selection**.
### NIS2 in 2027: Upcoming Deadlines and Requirements to Plan For
In 2027, organisations subject to NIS2 will also have to comply with the **periodic requirements managed through the ACN platform**. Planning these activities in advance helps keep the required information up to date and integrate regulatory obligations into business processes. The compliance calendar includes the following timeframes:
- **From 1 January to 28 February:** registration or annual renewal on the ACN platform.
- **From 15 April to 31 May:** updating information and the list of suppliers relevant for NIS purposes.
- **From 1 May to 30 June:** notification and updating of the categorisation of activities and services, pursuant to Article 30 of Legislative Decree No. 138/2024.
For organisations included in the NIS list in 2026, 2027 also introduces two important milestones: the **obligation to notify cybersecurity incidents takes effect on 1 January**, in accordance with the applicable timeframes, while **31 July 2027** is the deadline for implementing basic security measures. Companies will therefore need to plan the activities required to meet these deadlines and prepare for any additional security requirements established by the legislation and subsequent implementing provisions.
Scopri tutte le soluzioni della suite E-time
[Scopri le soluzioni](https://www.e-time.it/prodotti-e-time/index.md)
[Contattaci](https://www.e-time.it/contatti/index.md)
[Read More](https://www.e-time.it/en/nis2-upcoming-deadlines-october-2026/index.md)
[](https://www.e-time.it/en/nextcloud-hub-26-summer-updates/index.md)
October 5, 2026by [user](https://www.e-time.it/en/author/carla/index.md)[News](https://www.e-time.it/en/category/news-en/index.md)[Yookey](https://www.e-time.it/en/category/yookey-en/index.md)
## [Nextcloud Hub 26 Summer: All the Key Updates to Know](https://www.e-time.it/en/nextcloud-hub-26-summer-updates/index.md)
In the context of enterprise IT architectures, the **migration to sovereign collaboration platforms** represents a **strategic priority** to ensure compliance with **European regulatory frameworks (GDPR, NIS2, DORA)** and eliminate the risk of unauthorized data egress.
The release of **Nextcloud Hub 26 Summer** introduces significant architectural developments in access control, process automation, transmission channel security, and on-premises execution of artificial intelligence workloads.
Below, we analyze the **main technical and business pillars** introduced with this release.
**INDEX**
1. [Nextcloud Teams: Governance dei Workspace e Access Control](#teams)
2. [Nextcloud Office Desktop and Document Collaboration.](#office)
3. [Sharing Security and Protected Communication](#iga)
4. [Nextcloud Assistant: Sovereign On-Premises AI and Business Process Automation](#ai)
5. [Enterprise Governance and Groupware Integration](#id)
6. [Nextcloud for Businesses: E-Time’s Support](#inte)
## Nextcloud Teams: Workspace Governance and Access Control
To overcome the limitations of user-centric management, the new **Nextcloud Teams** application introduces a coordination model based on the logical isolation of workspaces:
- **Team Ownership (Decentralized Ownership):** Project assets **(Nextcloud Collectives, Deck boards)** are decoupled from the lifecycle of the individual creator account and assigned directly to the workgroup, eliminating the risk of orphaned resources during IAM deprovisioning.
- **Platform Quota Management:** Administrators can enforce strict storage limits (storage quotas) at Team level to optimize allocation across the underlying volumes (S3, NFS, ZFS).
### Nextcloud Office Desktop and Document Collaboration.
To ensure operational continuity for users accustomed to traditional clients, Nextcloud Hub 26 Summer expands the accessibility of the productivity suite:
- **Desktop Client for Nextcloud Office:** Nextcloud Office introduces a native desktop client, allowing documents to be edited locally with transparent and secure synchronization to the cloud platform.
- **Evolution of Collabora Online:** The Collabora integration is enhanced with advanced features for professional editing:
1. **Writer**: Introduction of the **Multi Page View,** a redesigned ruler with indentation and tab stop management, and tools for cloning formatting.
2. **Calc**: Introduction of the Solver directly into the toolbar, customization of sheet tab colors, and advanced cell comment management.
- **Collaboration in Nextcloud Text:** The shared **Markdown editor** now supports inline comments anchored to the text and footnote management, making technical document drafting smoother and more traceable.
### Sharing Security and Protected Communication
Data-in-transit protection and the confidentiality of internal communications are at the heart of the new security features:
- **One-Time Passwords (OTP) for Sharing Links**: This feature allows access to externally shared files to be protected by requiring a One-Time Password sent via email or through custom providers that can be integrated via API (e.g., SMS).
“Classified” Conversations in Nextcloud Talk: For managing highly sensitive information or information subject to trade secrecy, Nextcloud Talk introduces the Classified security preset:
1. **Complete blocking** of public links and access for guest users (guests).
2. **Restrictions on message forwarding**, call recording, and media previews.
3. **Scheduled expiration and automatic deletion** of messages and chats.
- **Announcement Channels:** Introduction of **one-way communication channels** with a fixed audience (without the possibility of leaving autonomously) and calls disabled, ideal for corporate broadcast communication.
### Nextcloud Assistant: Sovereign On-Premises AI and Business Process Automation
The adoption of **cloud-hosted AI services** exposes organizations to compliance risks and the leakage of confidential data to foreign jurisdictions. **Nextcloud Assistant** addresses this issue by offering artificial intelligence capabilities executed entirely within the **company’s infrastructure (on-premises or sovereign EU cloud):**
- **OCR Recognition and Audio Transcription:** The assistant can extract text from images, scanned documents, and handwritten notes, as well as generate subtitles and structured paragraph-based transcripts from recorded audio files.
- **Multi-App AI Agents and Scheduling:** AI agents are now operational within Mail, Talk, Deck, and Tables. They can store contexts on request, execute multi-step Skills, and schedule automated background tasks (e.g., sending daily briefings).
- **Automation with Nextcloud Tables and Budibase**: Nextcloud Tables extends relational data management by enabling the export/import of structures and integration with the Budibase workflow engine through the Orchestration Gateway app.
### Enterprise Governance and Groupware Integration
- **Nextcloud Governance Add-on:** Introduction of formal compliance tools with support for Sensitivity Labels (automatic document classification), Retention policies, and Legal Hold management to freeze data in the event of audits or litigation.
- **Sieve Filtering & Room Finder:** Native support for server-side email filtering via the Sieve protocol in Nextcloud Mail and integration with Calendar’s Free/Busy APIs for real-time allocation of **physical resources (Room Finder)**.
### Nextcloud for Businesses: E-Time’s Support
**Nextcloud Hub 26 Summer** consolidates an enterprise architecture capable of replacing proprietary SaaS suites, ensuring full control over the infrastructure, API-based interoperability, and maximum regulatory compliance.
As a specialized system integrator, **E-Time** supports companies in infrastructure design, server resource sizing, and [**Nextcloud integration with corporate IAM systems**](https://www.e-time.it/en/identity-asset-management/index.md) and networks.
[Discover Nextcloud, the solution included in the E-Time suite](https://www.e-time.it/contatti/index.md)
[Discover Nextcloud](https://www.e-time.it/en/e-cloud-based-on-nextcloud/index.md)
[Contact us](https://www.e-time.it/contatti/index.md)
[Read More](https://www.e-time.it/en/nextcloud-hub-26-summer-updates/index.md)
[](https://www.e-time.it/en/retrieval-augmented-fine-tuning/index.md)
September 29, 2026by [user](https://www.e-time.it/en/author/carla/index.md)[News](https://www.e-time.it/en/category/news-en/index.md)
## [RAFT: What Is Retrieval-Augmented Fine-Tuning and How Does It Work?](https://www.e-time.it/en/retrieval-augmented-fine-tuning/index.md)
**INDEX**
1. [What is RAFT (Retrieval-Augmented Fine-Tuning) and how does it work](#cosa)
2. [How RAFT combines RAG and Fine-Tuning](#qualefunzione)
3. [What are the benefits of RAFT for LLMs](#sistemidiiam)
4. [Limitations and critical aspects of Retrieval-Augmented Fine-Tuning](#rischi)
5. [How to Optimize RAG with Margot AI](#margot)
## What is RAFT (Retrieval-Augmented Fine-Tuning) and how does it work
**Retrieval-Augmented Fine-Tuning (RAFT)** is a training technique designed to adapt **Large Language Models (LLMs)** to highly specialized domains. The method involves training the model through questions to which both the original question and a **set of retrieved documents are associated.**
Compared to traditional training methods, RAFT teaches the model to interpret the context, identify and extract relevant information from the relevant documents, defined as oracle, and to actively recognize and ignore irrelevant or potentially misleading ones, called distractors.
### How RAFT combines RAG and Fine-Tuning
RAFT **combines the flexibility of [Retrieval-Augmented Generation (RAG)](https://www.e-time.it/en/rag-retrieval-augmented-generation-what-it-is-and-how-it-enhances-ai/index.md)** with the **specific adaptation offered** by Supervised Fine-Tuning. In traditional RAG, external documents are made available to the model exclusively during the inference phase, without the model having previously been trained to evaluate and select them.
**Traditional Fine-Tuning (SFT)**, on the other hand, focuses mainly on learning information and format, without preparing the model to use a real document context.
RAFT overcomes this distinction by directly inserting the retrieved documents into the **Fine-Tuning dataset,** including both the correct ones and the distractor documents. In this way, the LLM learns not only the structure and language characteristic of the reference domain, but also the ability **to dynamically evaluate the context** and **identify and extract the correct information in real time.**
### What are the benefits of RAFT for LLMs
The **main advantages of RAFT** concern **greater accuracy of responses** and **significant robustness** towards inaccurate or noisy retrievals. Through training with distractor documents and Chain-of-Thought reasoning, the model learns not to be influenced by irrelevant content retrieved by the retrieval system.
Furthermore, RAFT allows relatively smaller models, such as LLaMA-7B, to achieve **higher performance compared to zero-shot RAG** and **traditional domain Fine-Tuning**, both with and without RAG. In different application contexts, these models can achieve better results even compared to larger models, such as GPT-3.5 combined with RAG.
### Limitations and critical aspects of Retrieval-Augmented Fine-Tuning
Despite its advantages, **Retrieval-Augmented Fine-Tuning** presents some **limitations both from an operational and methodological point of view**. First of all, the effectiveness of the technique may vary depending on the nature of the task.
In tests conducted **on datasets characterized by synthetic or binary answers,** RAFT does not show particularly significant improvements compared to the combination of traditional domain Fine-Tuning and RAG. This highlights how the benefits of the method may be more limited in cases where an articulated reasoning process is not required.
A second aspect concerns the **data preparation phase**. The construction of the dataset in fact requires the accurate generation of answers explained step by step through Chain-of-Thought, as well as careful selection of oracle and distractor documents. This involves a significant i**nvestment of time and resources in dataset preparation.**
Finally, the model’s performance may be **sensitive to the configuration** of the dataset hyperparameters, including the percentage P and the number of distractor documents used during training.
### How to Optimize RAG with Margot AI
In enterprise customer service, **RAG technology** can be integrated into solutions such as **[Margot, E-time’s AI Agent,](https://www.margot-ai.com/en/home-english)** integrated with [**Rexpondo**](https://www.rexpondo.com/), the **ticketing and IT Service Management platform.**
Thanks to the dynamic retrieval of information from the company knowledge base, Margot can **provide accurate and up-to-date answers**, **automatically classify requests**, and **support operators** and users across different channels.
[Discover Margot, E-time’s AI solution](https://www.e-time.it/contatti/index.md)
[Discover Margot](https://www.e-time.it/en/home-english.index.md)
[Contact us](https://www.e-time.it/contatti/index.md)
[Read More](https://www.e-time.it/en/retrieval-augmented-fine-tuning/index.md)
[](https://www.e-time.it/en/orphan-accounts-risks-iam-iga/index.md)
August 11, 2026by [user](https://www.e-time.it/en/author/carla/index.md)[News](https://www.e-time.it/en/category/news-en/index.md)
## [Orphan Accounts: Risks, Prevention and Management with IAM](https://www.e-time.it/en/orphan-accounts-risks-iam-iga/index.md)
**INDEX**
1. [Orphan accounts: what are they and why do they represent a risk?](#cosa)
2. [How are orphan accounts created in corporate systems?](#qualefunzione)
3. [What is the difference between orphan, inactive and disabled accounts?](#sistemidiiam)
4. [What risks do orphan accounts pose to cybersecurity?](#rischi)
5. [How to identify and prevent orphan accounts with IAM systems?](#iam)
6. [How do IAM and IGA automate provisioning and deprovisioning?](#iamiga)
## Orphan accounts: what are they and why do they represent a risk?
**Orphan accounts** are accounts that continue to be present and, in some cases, active within directories, applications and corporate systems even when the person they were associated with no longer works for the organization or no longer holds the role that justified their access. The problem therefore arises from the **lack of an effectively responsible account owner**, who may continue to have the previously assigned permissions.
These identities represent a **security risk** because they combine lack of control, **potentially unnecessary permissions** and limited visibility into activities. An account that is not properly deactivated can in fact become an **access point to corporate resources and sensitive data**, increasing the risk of improper use by former employees or external parties.
### How are orphan accounts created in corporate systems?
Orphan accounts are often the result of a **poorly coordinated management of the user lifecycle**. One of the most common cases occurs when an employee’s departure is not promptly communicated to IT teams or when account deactivation has to be carried out manually across numerous systems and applications.
The problem can also arise in connection with **role changes, corporate reorganizations or internal transfers**, when old permissions are not removed and accumulate over time. Other cases involve collaborators, consultants and suppliers who are assigned **temporary accounts** that are not revoked when the relationship ends. **System migrations, mergers and acquisitions** can also contribute to the persistence of accounts that are no longer associated with active users, especially when the different infrastructures are not properly aligned.
### What is the difference between orphan, inactive and disabled accounts?
Although they may seem like similar situations, **orphan, inactive and disabled accounts** describe different conditions:
- **Orphan account:** it is still present and potentially active in a system, but is no longer associated with a person or a manager who has a current role in the organization.
- **Inactive account:** it belongs to an identifiable user, but has not been used for an extended period. However, the user may still be part of the organization.
- **Disabled account:** it has been explicitly suspended or deactivated and should therefore not allow access. However, if the deactivation is not completed correctly, processes or active authorizations may remain, giving rise to the so-called **zombie account**.
Distinguishing between these situations is important to **determine which action to take** and correctly assess the level of risk associated with each account.
### What risks do orphan accounts pose to cybersecurity?
The presence of orphan accounts can significantly increase an organization’s **attack surface**. Accounts that still have credentials and authorizations can in fact be exploited to gain **unauthorized access** and reach corporate data or systems, with potential economic, operational and reputational consequences.
The risk also concerns **regulatory compliance**, as inadequate access management can create issues with requirements established by regulations and standards such as GDPR, SOX and HIPAA. Added to this are difficulties during audits, the need to dedicate resources to monitoring accounts that are no longer necessary and the risk of **insider threats**, especially when credentials belong to former employees or collaborators.
Orphan accounts can also be exploited by attackers as **low-visibility entry points**. Techniques such as **credential stuffing and password guessing**, or the use of already compromised credentials.
### How to identify and prevent orphan accounts with IAM systems?
**IAM and IGA** systems can identify orphan accounts through automated **reconciliation** processes, comparing the accounts present in directories and applications with company data, such as data coming from the HR system. When an active account associated with an identity that is no longer present or active is detected, the system can flag it and initiate verification, deactivation or removal procedures.
Prevention instead relies on the automation of the **identity lifecycle (Joiner-Mover-Leaver)**, connecting HR processes to the IT infrastructure so that any change relating to an employee is promptly reflected in their access.
rifletta tempestivamente sui suoi accessi.
[**Provisioning and deprovisioning**](https://www.e-time.it/en/user-provisioning-deprovisioning/index.md), together with **RBAC, the least privilege principle and temporary account management**, make it possible to keep access up to date. Features such as **SSO and MFA** also help strengthen security and reduce the risk associated with unused credentials.
### How do IAM and IGA automate provisioning and deprovisioning?
**IAM and IGA systems** automate identity lifecycle management, reducing manual intervention and the risk of orphan accounts. Through integration with HR systems, directories and applications, they can trigger automated workflows for the **creation, modification and revocation of access**, assigning users the permissions required according to their role and removing them when they are no longer authorized.
[**Yookey**](https://www.e-time.it/en/keycloak-e-auth-iam/index.md), based on Keycloak, integrates natively with [**YooPoint**](https://www.e-time.it/en/yoopoint-en/index.md), E-time’s IGA solution, to support identity and access lifecycle management. This integration makes it possible to coordinate **provisioning and deprovisioning** processes, helping ensure that access is assigned and revoked consistently and promptly.
[Discover Yookey, E-time's IAM solution](https://www.e-time.it/contatti/index.md)
[Discover Yookey](https://www.keycloak-saas.com/)
[Contact us](https://www.e-time.it/contatti/index.md)
[Read More](https://www.e-time.it/en/orphan-accounts-risks-iam-iga/index.md)
[](https://www.e-time.it/en/user-provisioning-deprovisioning/index.md)
July 28, 2026by [user](https://www.e-time.it/en/author/carla/index.md)[News](https://www.e-time.it/en/category/news-en/index.md)
## [What Is User Provisioning and Deprovisioning and How to Automate It](https://www.e-time.it/en/user-provisioning-deprovisioning/index.md)
**INDEX**
1. [What Is User Provisioning?](#cosa)
2. [What Is User Deprovisioning?](#qualefunzione)
3. [Provisioning vs. Deprovisioning: What Are the Differences?](#iga)
4. [How Automatic User Provisioning Works](#comp)
5. [Provisioning and Deprovisioning: Practical Examples](#esempio)
6. [User Provisioning, Single Sign-On, and Identity Governance: How They Work Together in Yookey](#inte)
## What Is User Provisioning?
**User provisioning** is the process of **creating, configuring, and managing user identities and accounts** within an organization’s systems, devices, and networks.
This practice is essential to ensure that employees, collaborators, or partners promptly obtain the **appropriate access permissions and privileges** required to use the business resources they need for their work. Provisioning is often based on the **automatic assignment of permissions according to the [user’s role (RBAC)](https://www.keycloak-saas.com/en/role-based-access-control-rbac)**[.](https://www.e-time.it/en/category/news-en/_wp_link_placeholder.index.md)
### What Is User Deprovisioning?
**User deprovisioning** is the opposite process, namely the **revocation of access permissions**, together with the deactivation or deletion of accounts. It typically takes place when an employee leaves the company, changes department, or simply no longer requires certain privileges to perform their duties.
The objective of deprovisioning is to **ensure that business resources remain protected**, preventing **unauthorized access** by personnel who are no longer authorized.
### Provisioning vs Deprovisioning: What Are the Differences?
The main difference lies in their **purpose within the user lifecycle**: provisioning focuses on **enablement and productivity**, creating identities and providing the tools required for a person to start working.
Deprovisioning, on the other hand, is primarily focused on **cybersecurity and data protection**, removing those same privileges and closing access to the system when the employment relationship ends or the user’s role changes.
### How Automatic User Provisioning Works
**Automatic provisioning** relies on [**Identity and Access Management (IAM) systems**](https://www.e-time.it/en/identity-asset-management/index.md) that communicate directly with corporate directories or Human Resources (HR) platforms. When an event occurs, such as the onboarding of a new employee into the HR management system, the platform automatically applies predefined rules and **standardized protocols such as SCIM** to create accounts, assign permissions according to the user’s role, and synchronize them across all business applications without manual intervention.
Automation provides significant benefits in terms of **security, operational efficiency, and cost savings**. By automating these processes, organizations eliminate **delays and human errors** that are typical of manual configurations, allowing IT teams to focus on higher-value activities. From a security perspective, it ensures the **consistent enforcement of corporate policies** and the certainty that user access is revoked immediately when an employee leaves the organization, also facilitating **regulatory compliance**.
### Provisioning and Deprovisioning: Practical Examples
A practical example is the onboarding of a marketing manager: the system automatically assigns credentials for CRM management and analytics software, while a financial analyst is granted access to accounting databases. Another interesting example is **Just-In-Time (JIT) provisioning**, where the account for a cloud application is not created in advance but is generated dynamically upon the first login attempt through **Single Sign-On (SSO)**, using standards such as **SAML**.
In deprovisioning, an example is the **immediate and simultaneous deactivation** of VPN, email, and SaaS software as soon as the HR system records the end of an employee’s contract.
### User Provisioning, Single Sign-On, and Identity Governance: How They Work Together in Yookey
These three tools form a **complete identity security ecosystem**. Provisioning acts first by creating and operationally deactivating user accounts across different systems. **Single Sign-On (SSO)** then handles authentication, allowing users to access all authorized applications with a single login.
[**Yookey**](https://www.keycloak-saas.com/en/en), the **Keycloak-based IAM platform**, integrates **Single Sign-On (SSO), Multi-Factor Authentication (MFA)**, and identity federation capabilities, enabling organizations to centralize access management.
Finally, **Identity Governance and Administration (IGA)** platforms oversee the entire identity lifecycle by providing compliance reports, access reviews, and enforcing policies such as [**Separation of Duties (SoD)**](https://www.keycloak-saas.com/en/segregation-of-duties).
[**YooPoint**](https://www.e-time.it/en/yoopoint-en/index.md) completes this ecosystem by automating **identity, role, and authorization governance** to ensure **security and compliance**.
[Discover Yookey, E-time's IAM solution](https://www.e-time.it/contatti/index.md)
[Discover Yookey](https://www.keycloak-saas.com/)
[Contact us](https://www.e-time.it/contatti/index.md)
[Read More](https://www.e-time.it/en/user-provisioning-deprovisioning/index.md)
[](https://www.e-time.it/en/onboarding-offboarding-identity-lifecycle-management/index.md)
June 26, 2026by [user](https://www.e-time.it/en/author/carla/index.md)[News](https://www.e-time.it/en/category/news-en/index.md)[Yookey](https://www.e-time.it/en/category/yookey-en/index.md)
## [User onboarding and offboarding: how to automate Identity Lifecycle Management](https://www.e-time.it/en/onboarding-offboarding-identity-lifecycle-management/index.md)
**INDEX**
1. [User onboarding: what it is and why it is essential for productivity](#cosa)
2. [Identity Lifecycle Management: complete identity lifecycle management](#qualefunzione)
3. [User offboarding: the most critical phase for cybersecurity](#iga)
4. [How to automate user onboarding and offboarding](#comp)
5. [Benefits of identity lifecycle automation](#id)
6. [IGA software: identity governance and advanced automation](#ruolo)
7. [Yookey IAM and YooPoint IGA: an integrated identity management platform](#inte)
## User onboarding: what it is and why it is essential for productivity
**User onboarding** represents the initial phase of the digital identity lifecycle. During this process, the new employee’s identity is created and the **necessary access** is assigned to allow them to perform their operational activities from day one.
When **onboarding is managed manually**, organizations may face **several challenges**: delays in account activation, errors in permission configuration, repetitive tasks for the IT department, and a lack of standardization. These inefficiencies slow down the integration of new employees and reduce productivity, generating operational costs and internal disruptions.
### Identity Lifecycle Management: complete identity lifecycle management
**Identity Lifecycle Management (ILM)** includes the set of processes that govern the creation, updating, and deactivation of digital identities within an organization.
Identity lifecycle management is not limited to initial account provisioning but covers the entire employee journey. It includes **access assignment**, privilege changes due to role or department changes, periodic compliance reviews, and finally **revocation of permissions** when employment ends.
A **structured approach to Identity Lifecycle Management** ensures alignment between business roles, permissions, and security policies throughout all phases of the professional relationship.
### User offboarding: the most critical phase for cybersecurity
**Offboarding** represents the final stage of the identity lifecycle and is often considered one of the most sensitive processes in **cybersecurity**.
Ineffective account deactivation can leave active users, credentials, and unnecessary privileges in place. These unused accounts, often referred to as **orphan accounts**, can become an entry point for **unauthorized access** and data breaches.
Automating **access revocation** allows organizations to promptly remove privileges, group memberships, and software licenses, significantly reducing exposure risks and improving control over digital assets
### How to automate user onboarding and offboarding
**Identity lifecycle** automation is based on the integration between **HR systems**, directory services, and identity management platforms.
When a new employee is registered in the HR system, automated workflows can instantly create the digital identity, assign the correct role, and activate the necessary application access. Similarly, when employment ends, the system can automatically revoke **access rights**, remove permissions, and reclaim assigned licenses.
This approach eliminates most manual tasks, accelerates processes, and ensures consistent enforcement of organizational policies.
#### Why manual identity lifecycle management is no longer sustainable
Many organizations still manage **onboarding, access changes, and offboarding** through manual activities, spreadsheets, or non-standardized procedures. This approach increases the risk of **human errors** and makes it difficult to maintain an up-to-date view of user permissions.
The rise of cloud applications and phenomena such as **Shadow IT** further complicate access monitoring. As a result, unused licenses, excessive permissions, and forgotten accounts tend to accumulate over time, creating operational inefficiencies, security risks, and compliance issues during audits.
### Benefits of identity lifecycle automation
**Automating identity management** delivers **tangible benefits** in both operational efficiency and security.
Key benefits include:
- **reduction of manual IT tasks**
- **faster onboarding and offboarding processes**
- **greater control over enterprise access**
- consistent enforcement of the **least privilege principle**
- **reduced risk of unauthorized access**
- optimization of software licensing costs
- full audit trails for compliance and reporting
Automation also improves the end-user experience by ensuring timely access to the tools needed to work efficiently.
### IGA software: identity governance and advanced automation
**Identity Governance and Administration (IGA)** platforms enable organizations to control and govern the entire digital identity ecosystem, ensuring that each user has only the **access rights** required for their role.
**IGA software** automates key processes such as **access assignment**, access review campaigns, periodic certifications, and compliance enforcement. With **Role-Based Access Control (RBAC)**, permissions are consistently assigned based on business roles.
More advanced solutions also integrate artificial intelligence and behavioral analytics to detect anomalies, identify excessive privileges, and automatically suggest appropriate access rights.
### Yookey IAM and YooPoint IGA: an integrated identity management platform
To achieve full control over the digital identity lifecycle, it is essential to integrate **Identity Access Management (IAM)** and **Identity Governance and Administration (IGA)**. In this context, [**Yookey**](https://www.e-time.it/en/keycloak-e-auth-iam/index.md) and [**YooPoint**](https://www.e-time.it/en/yoopoint-en/index.md) work in synergy: Yookey handles authentication, **SSO**, **MFA**, and application access, while YooPoint manages roles, approvals, authorization processes, and **compliance**.
The integration between the two platforms enables full **identity lifecycle** automation, from onboarding to offboarding, ensuring that access always aligns with business roles. This approach **reduces the risk of unauthorized access,** **improves compliance, and simplifies identity management** within a secure and scalable ecosystem.
[Discover YooPoint, the IGA solution by E-time](https://www.e-time.it/contatti/index.md)
[Discover YooPoint](https://www.e-time.it/en/yoopoint-en/index.md)
[Contact us](https://www.e-time.it/en/contacts/index.md)
[Read More](https://www.e-time.it/en/onboarding-offboarding-identity-lifecycle-management/index.md)
[](https://www.e-time.it/en/what-is-identity-governance-administration-iga/index.md)
June 4, 2026by [user](https://www.e-time.it/en/author/carla/index.md)[News](https://www.e-time.it/en/category/news-en/index.md)
## [What Is Identity Governance and Administration (IGA) and How It Works in Digital Identity Management](https://www.e-time.it/en/what-is-identity-governance-administration-iga/index.md)
**INDEX**
1. [What Is Identity Governance and Administration (IGA): Full Definition](#cosa)
2. [Identity Governance and Administration (IGA): Objectives and Enterprise Use Cases](#qualefunzione)
3. [Why IGA Is Essential in Digital Identity and IT Security Management](#iga)
4. [What Are the Components of an IGA System: Identity Lifecycle, Roles, Policies, and Access Control](#comp)
5. [Identity Lifecycle Management: Provisioning, Update, and Deprovisioning of Users](#id)
6. [How IGA and IAM Work Together in Digital Identity Management](#ruolo)
7. [Integration Between YooPoint IGA and Yookey IAM: Governance and Access Management](#inte)
## What Is Identity Governance and Administration (IGA): Full Definition
**Identity Governance and Administration (IGA)** is the set of processes, rules, and technologies that enable organizations to effectively govern **digital identities** and their access rights to enterprise systems. Its goal is to ensure that each user has only the permissions necessary to perform their activities, in compliance with security policies and regulatory requirements.
**IGA platforms** combine two complementary aspects: on one side **identity governance**, which ensures control, visibility, and compliance; on the other side **identity administration**, which operationally manages activities such as account creation, permission assignment, and revocation.
### Identity Governance and Administration (IGA): Objectives and Enterprise Use Cases
**Identity Governance and Administration (IGA)** arises from the need to structurally control who can access enterprise resources, what permissions they have, and for how long these permissions remain valid. This approach helps reduce **risks related to improper access**, increase **traceability of operations**, and improve overall **organizational security.**
IGA solutions are applied across **multiple sectors.** In **healthcare**, they help protect sensitive data and medical records; in the **financial sector**, they enable monitoring of privileges and role conflicts; in **organizations using cloud services** and SaaS applications, they facilitate automated access management across complex and distributed environments.
### Why IGA Is Essential in Digital Identity and IT Security Management
The growing adoption of **cloud environments**, hybrid infrastructures, and distributed applications has made it increasingly difficult to manually manage users, roles, and permissions. In this context, an **IGA system** enables centralized control over access and reduces the risk of exposing enterprise resources.
The adoption of policies based on the principle of **least privilege** ensures that each user is granted only the permissions strictly necessary, limiting the possibility that compromised accounts or misconfigurations become an **attack vector** for the organization.
### What Are the Components of an IGA System: Identity Lifecycle, Roles, Policies, and Access Control
An IGA platform is based on several elements that work together to ensure control over **digital identities**. These include **user lifecycle management**, definition of business roles, application of **access policies**, and periodic access review activities. Particular importance is given to models such as [**Role-Based Access Control (RBAC)**](https://www.keycloak-saas.com/en/abac-and-rbac-compared), which allows permissions to be assigned based on job role, and **Separation of Duties (SoD)**, used to prevent situations where a single user may accumulate **conflicting privileges**.
### Identity Lifecycle Management: Provisioning, Update, and Deprovisioning of Users
**Identity Lifecycle Management** accompanies the user throughout all stages of their presence within the organization, from **account creation** to deactivation. During onboarding, the IGA system can automate account creation and **permission assignment** based on the user’s business role. During the working lifecycle, any role or organizational changes are handled by dynamically updating permissions and attributes while maintaining consistency with company policies.
In parallel, **IGA process automation** eliminates many manual access management activities through predefined workflows and rules that govern approval, assignment, and revocation of privileges. This approach ensures **higher operational efficiency**, reduces human error, and guarantees that every access change is applied in a timely and controlled manner throughout the **identity lifecycle**.
### How IGA and IAM Work Together in Digital Identity Management
Although they serve different purposes, **Identity Governance and Administration (IGA)** and **Identity and Access Management (IAM)** are complementary technologies that work together to ensure **secure and efficient management of digital identities**.
IAM solutions handle operational access aspects such as authentication, authorization, Single Sign-On, and credential management, while IGA introduces a **governance layer** that verifies the correctness, compliance, and consistency of assigned user permissions. By integrating IGA and IAM, organizations can **centralize identity control**, automate provisioning processes, and enforce **consistent security policies** across on-premise systems, cloud environments, and enterprise applications, improving security, compliance, and **access traceability**.
### Integration Between YooPoint IGA and Yookey IAM: Governance and Access Management
The integration between [**YooPoint**](https://www.e-time.it/en/yoopoint-en/index.md), the **Identity Governance and Administration (IGA)** solution, and [**Yookey**](https://www.e-time.it/en/keycloak-e-auth-iam/index.md), the **Identity and Access Management (IAM)** platform based on **Keycloak**, enables the unification of **governance and operational identity management** within a single ecosystem. In this model, Yoopoint governs **roles, permissions, and access approval processes**, while Yookey handles user authentication and the enforcement of access policies through features such as **Single Sign-On (SSO)**, **Multi-Factor Authentication (MFA)**, and **identity federation**.
The connection between the two platforms makes it possible to automate the entire **identity lifecycle**, from account creation to permission assignment and revocation. In this way, organizations can keep users, roles, and privileges aligned across on-premise and cloud applications, improving **security**, **regulatory compliance**, and **operational efficiency**.
[Discover YooPoint, the IGA solution from E-time](https://www.e-time.it/contatti/index.md)
[Discover YooPoint](https://www.e-time.it/yoopoint.index.md)
[Contact us](https://www.e-time.it/contatti/index.md)
[Read More](https://www.e-time.it/en/what-is-identity-governance-administration-iga/index.md)
[](https://www.e-time.it/en/rag-vs-fine-tuning-ai-models/index.md)
May 26, 2026by [user](https://www.e-time.it/en/author/carla/index.md)[News](https://www.e-time.it/en/category/news-en/index.md)
## [RAG vs Fine-Tuning: Differences, Benefits, and Which One to Choose for AI Models](https://www.e-time.it/en/rag-vs-fine-tuning-ai-models/index.md)
**INDEX**
1. [RAG vs Fine-Tuning: Comparing Differences, Costs, and Scalability](#qualefunzione)
2. [What Is Fine-Tuning and When Should You Use It for LLMs?](#cosa)
3. [Vantaggi del Fine-Tuning nei modelli di linguaggio](#sistemidiiam)
4. [Choosing Between RAG and Fine-Tuning for Customer Service](#vantaggi)
5. [Alternatives to RAG and Fine-Tuning: Prompt Engineering and Embeddings](#alt)
6. [How to Choose the Best AI Approach for Your Use Case](#ruolo)
7. [Applying RAG to Enterprise Customer Service with Margot](#margot)
## RAG vs Fine-Tuning: Comparing Differences, Costs, and Scalability
The **main difference between [Retrieval-Augmented Generation (RAG)](https://www.e-time.it/en/rag-retrieval-augmented-generation-what-it-is-and-how-it-enhances-ai/index.md)** and **Fine-Tuning** lies in **how knowledge is managed**. **RAG retrieves information** **from external sources** in real time, while **Fine-Tuning** **embeds knowledge directly into the model** through additional training.
As a result, **Fine-Tuning** provides **greater specialization** but may introduce the **risk of catastrophic forgetting**, whereas **RAG** preserves the model’s original capabilities and **simplifies knowledge updates**.
- **Costs:** Fine-Tuning requires **high-quality datasets**, **data preparation activitie**s, and dedicated hardware resources. **RAG** generally involves **lower upfront costs.**
- **Implementation Time: RAG** can be deployed **more quickly**, while **Fine-Tuning** requires an **additional training phase.**
- **Knowledge Updates:** With **RAG**, **knowledge bases** can be **updated without modifying the model**. Fine-Tuning typically requires retraining whenever significant new information must be incorporated.
- **Scalability:** **RAG** makes it easy **to expand document repositorie**s and information sources, whereas **Fine-Tuning** becomes **more complex** as the amount of knowledge increases.
- **Performance:** Fine-Tuning delivers **highly specialized and consistent responses**, while **RAG** excels when access **to dynamic and continuously updated information** is required.
### What Is Fine-Tuning and When Should You Use It for LLMs?
**Fine-tuning** is a **technique used to specialize a pre-trained language model** for **a specific domain or task**. Instead of building a model from scratch, organizations start with an **already trained LLM** and further train it **using carefully selected datasets relevant** to the intended use case.
During this process, the **model’s internal parameters are updated**, enabling it to acquire **deeper expertise**, **specialized terminology**, and **response patterns tailored** to industries such as healthcare, finance, insurance, or customer support.
### Benefits of Fine-Tuning in Language Models
The main strength of fine-tuning lies in its ability **to adapt model behavior** to the **specific needs of an organization**. Through targeted training, **AI systems** can **learn technical terminology**, **business processes, communication style,** and operational rules, generating more consistent and context-aware responses.
This approach is particularly effective in scenarios where the **information to be managed remains relatively stable** over time and the system must replicate precise procedures or highly specialized language. Typical applications include **technical documentation management**, insurance workflows, regulatory procedures, and internal business processes.
Another **key advantage** is **fast inference**. Since the model already contains the required knowledge, it does not need to continuously query external databases to generate responses.
For use cases **involving dynamic and frequently updated data**, however, **RAG** represents an alternative approach with specific [**advantages for chatbots and enterprise AI systems.**](https://www.e-time.it/en/benefits-rag-ai-applications/index.md)
### Choosing Between RAG and Fine-Tuning for Customer Service
The **choice between RAG and Fine-Tuning** depends on **project objectives** and the **type of information** the system must manage. When a chatbot needs access **to frequently changing, personalized, or real-time data**—such as product availability, customer information, financial data, or case status—**RAG is generally the most effective solution.**
On the other hand, if the **goal is to build an assistant** that consistently reflects a company’s **tone of voice**, follows established business rules, and handles standardized processes, **Fine-Tuning** may **deliver better results**. Training smaller models can create **highly specialized, fast, and controllable AI systems.**
In many advanced implementations, both **technologies are combined** to leverage the **specialization of Fine-Tuning** alongside the **real-time knowledge access provided by RAG.**
### Alternatives to RAG and Fine-Tuning: Prompt Engineering and Embeddings
In addition to RAG and Fine-Tuning, several **other techniques** can enhance **AI system performance.**
**Prompt Engineering** focuses on **optimizing the instructions provided to a model** in order **to influence its behavior without modifying internal parameters**. In many scenarios, this approach can achieve excellent results without incurring additional training costs.
**Embeddings** are a core technology behind **semantic search and RAG systems**. **By converting content into vector representations**, embeddings enable AI systems to identify and retrieve the most relevant information in response to user queries.
### How to Choose the Best AI Approach for Your Use Case
The most suitable solution depends primarily on the **nature of the data,** the l**evel of specialization required**, and the **characteristics of the model being used.**
For **large, general-purpose language models,** such as modern **LLMs**, RAG is often the preferred option because it allows organizations **to add up-to-date knowledge** without altering the capabilities acquired during pre-training.
In summary, **RAG** is particularly **well suited for dynamic information**, continuously evolving documentation, and personalized data. **Fine-Tunin**g is generally **more effective for repetitive tasks**, **regulated processes,** and environments where terminology, style, and procedures remain stable over time.
### Applying RAG to Enterprise Customer Service with Margot
In enterprise customer service environments, RAG can be implemented through solutions such as [**Margot**](https://www.e-time.it/en/margot/index.md), **E-time’s AI Agent**, integrated with [**Rexpondo**](https://www.e-time.it/en/rexpondo/index.md), the **ticketing and IT Service Management platform**. By dynamically retrieving **information from the company knowledge base**, Margot can provide accurate and **up-to-date answers,** automatically classify requests, and support both users and operators across multiple channels.
The combination of **conversational AI** and an [**Rexpondo ITSM platform**](https://www.rexpondo.com/itsm-software/) enables organizations **to automate support processes**, reduce **ticket handling times**, and improve the **overall customer experience** while maintaining high standards of **security, privacy, and regulatory compliance**.
Discover Margot, E-time’s AI Agent, and Other Available Services
[Discover our solutions](https://www.e-time.it/prodotti-e-time/index.md)
[Contact us](https://www.e-time.it/contatti/index.md)
[Read More](https://www.e-time.it/en/rag-vs-fine-tuning-ai-models/index.md)
[](https://www.e-time.it/en/cloud-cybersecurity-voucher-2026-incentives/index.md)
May 21, 2026by [user](https://www.e-time.it/en/author/carla/index.md)[News](https://www.e-time.it/en/category/news-en/index.md)[NIS2](https://www.e-time.it/en/category/nis2-en/index.md)
## [Cloud & Cybersecurity Voucher 2026: incentives for businesses](https://www.e-time.it/en/cloud-cybersecurity-voucher-2026-incentives/index.md)
**INDEX**
1. [What is the Cloud & Cybersecurity Voucher 2026 and who is it for](#cosa)
2. [How the Cloud & Cybersecurity Voucher works 2026](#qualefunzione)
3. [Requirements to access the Cloud & Cybersecurity Voucher](#sistemidiiam)
4. [Benefits of the Cloud & Cybersecurity Voucher for businesses](#vantaggi)
5. [Why Choose E-time for Cloud Solutions and Cybersecurity Services](#ruolo)
## What is the Cloud & Cybersecurity Voucher 2026 and who is it for
The **Cloud & Cybersecurity Voucher 2026** is a measure introduced by the [**Italian Ministry of Enterprises and Made in Italy (MIMIT)**](https://www.mimit.gov.it/it/incentivi/sostegno-alla-domanda-di-servizi-di-cloud-computing-e-cyber-security) aimed at supporting **business digitalization** and **strengthening cybersecurity**.
The initiative provides a **non-repayable grant covering 50%** of eligible expenses, up to a **maximum of €20,000**, for investments in cloud technologies, software solutions, hardware infrastructure, and cybersecurity services.
The incentive is targeted at Italian **micro, small and medium-sized enterprises** (SMEs), but it is also available to **professionals and self-employed workers** with a business presence in Italy who want to improve their digital security or modernize their IT infrastructure.
For technical details and to consult all the **official attachments**, read the full text of the **[Ministerial Decree of July 18, 2025.](https://www.mimit.gov.it/it/normativa/decreti-ministeriali/decreto-ministeriale-18-luglio-2025-disciplina-degli-interventi-di-sostegno-alla-domanda-di-servizi-di-cloud-computing-e-cyber-security)**
### How the Cloud & Cybersecurity Voucher works 2026
The grant can be requested by submitting an **investment project** ranging from **€4,000 to €40,000.** Eligible expenses must relate to the purchase of innovative technologies or services, or the upgrade of existing cloud and cybersecurity tools within the company.
The application process is divided into two main phases. First, an **official list of qualified providers** authorized to deliver eligible services will be established, expected between **March and May 2026**. Afterwards, a dedicated **application window** will open for businesses **to submit their requests.**
Applications will be evaluated **on a first-come**, first-served basis **until available funds are exhausted**. To access the incentive, companies must purchase services exclusively from accredited **providers included in the ministerial register**.
### Requirements to access the Cloud & Cybersecurity Voucher
To apply for the **Cloud & Cybersecurity Voucher 2026**, businesses and professionals must meet **specific eligibility criteria** defined by the program. Key requirements include being **legally registered and operational in Italy**, as well as having an internet connection with a **minimum download speed of 30 Mbps**.
A further requirement introduced recently is **compliance with insurance obligations** covering damages caused by natural disasters and catastrophic events, which is mandatory to access the funding.
The incentive does **not apply to sectors excluded** under the EU “de minimis” regulation, such as primary agricultural production, fisheries, and aquaculture.
### Benefits of the Cloud & Cybersecurity Voucher for businesses
The **Cloud & Cybersecurity Voucher** enables companies to invest in innovative technologies while significantly **reducing initial project costs**. Thanks to the non-repayable grant, businesses and professionals can adopt advanced cybersecurity and cloud solutions while covering only part of the total investment.
The measure **strengthens corporate security** by **reducing risks related to cyberattacks** and **operational disruptions**. At the same time, it supports the transition toward more modern and scalable infrastructures, improving e**fficiency, reliability, and long-term growth potential.**
Another key benefit is **regulatory complianc**e: investing in cybersecurity and data protection helps companies more easily meet **information security standards,** including the new and **[stringent obligations of the NIS 2 Directive](https://www.e-time.it/en/the-nis-2-directive-what-changes-in-security-management-for-companies/index.md);** this investment allows for a timely response to the regulation, ensuring full compliance by the **[upcoming deadlines set for 2026](https://www.e-time.it/en/nis2-deadlines-2026/index.md).**
### Why Choose E-time for Cloud Solutions and Cybersecurity Services
Choosing **E-time** for IT and cybersecurity projects means partnering with a **structured technology provider** that combines expertise, experience, and a strong focus on **scalable and reliable solutions.**
- **Enterprise Experience**: Consolidated expertise in software development for complex sectors such as **banking, insurance, companies and Public Administration.**
- **Specialized Expertise:** Advanced security solutions (risk management with Rexguard), Identity Management, and \[Service Desk & ITSM\] platforms.
- **Tailor-made Solutions:** Custom design integrating proprietary and open-source technologies to turn IT into a strategic business asset.
- **International Certifications**: High standards guaranteed by **ISO 9001:2015** and **ISO/IEC 27001**, with cloud extensions (27017 and 27018).
In view of the **application window opening**, E-time has already started the accreditation **process for the official MIMIT register**, confirming its role as a qualified technology partner to support companies in implementing **cloud and SaaS solutions** that meet the **voucher requirements.**
Leverage the Cloud & Cybersecurity Voucher 2026
with E-time!
[Discover solutions](https://www.e-time.it/en/e-time-software-solutions/index.md)
[Contact us](https://www.e-time.it/en/contacts/index.md)
[Read More](https://www.e-time.it/en/cloud-cybersecurity-voucher-2026-incentives/index.md)
[](https://www.e-time.it/en/yoopoint-iga-solution-identity-governance/index.md)
May 7, 2026by [user](https://www.e-time.it/en/author/carla/index.md)[News](https://www.e-time.it/en/category/news-en/index.md)
## [YooPoint: the new IGA solution of the E-time suite for identity governance](https://www.e-time.it/en/yoopoint-iga-solution-identity-governance/index.md)
**INDEX**
1. [What is YooPoint, Identity Governance solution](#cosa)
2. [Key features of the IGA solution](#qualefunzione)
3. [Why choose an IGA software like YooPoint: benefits and advantages](#sistemidiiam)
4. [YooPoint: IGA solution for Municipalities and Public Administration](#PA)
5. [IGA & IAM: two complementary layers](#ruolo)
**Digital identity and corporate access management** is now a key element for security, compliance, and internal organization.
For this reason, the **E-time suite** introduces **YooPoint**, the **new IGA (Identity Governance and Administration) solution** designed to simplify the **management of users, permissions, and corporate access**.
## What is YooPoint, Identity Governance solution
**YooPoint** is an **IGA solution** developed to centrally manage identities, permissions, and corporate access.
The platform enables you to:
- manage users and credentials;
- control **permissions and access rights**;
- monitor access and transits;
- **automate onboarding** and **credentialing processes**;
- improve **security** and **traceability**.
### Key features of the IGA solution
#### Identity governance
**YooPoint** supports companies in the **structured management of digital identities**, simplifying the control of roles, permissions, and authorizations.
#### Corporate access management
The IGA solution enables **monitoring of entries, access, and user activity**, improving **security** and **operational control**.
#### Process automation and system integration
YooPoint **automates several access management activities**, reducing manual operations and management time.
The platform can be integrated with existing **access control systems** and **IT infrastructure**, enabling **centralized identity management.**
### Why choose an IGA software like YooPoint: benefits and advantages
YooPoint is designed to support companies in the **digitalization of access control processes**, **identity governance**, and **visitor management**, offering a **modern, centralized platform** that can be integrated with existing infrastructure.
With YooPoint, companies can:
- improve digital **identity governance**;
- increase **access security**;
- **centralize permissions** and access rights;
- simplify **onboarding processes**;
- reduce **manual activities** and **operational inefficiencies.**
### YooPoint: IGA solution for Municipalities and Public Administration
YooPoint is the ideal IGA solution **to support Public Administration organizations** in the **centralized management of digital identities** and access to information systems. **Municipalities, public entities, and multi-site organizations** can simplify the control of users, roles, and permissions, improving security, compliance, and activity traceability.
Thanks to the automation of provisioning and access management processes, YooPoint **helps public organizations reduce manual activities**, minimize operational errors, and **optimize digital identity governance**. The platform also enables more efficient management of onboarding, role changes, and permission revocation, ensuring greater operational continuity and improved **control over access to Public Administration services.**
### IGA & IAM: two complementary layers
YooPoint’s **IGA (Identity Governance and Administration)** solution is **fully integrated with [Yookey](https://www.e-time.it/en/keycloak-e-auth-iam/index.md)**[,](https://www.e-time.it/en/category/news-en/_wp_link_placeholder.index.md) the **Identity & Access Management (IAM)** software of the E-time family.
The **integration between IGA and IAM** allows organizations **to centrally manage both identity governance** and **permissions**, as well as authentication and access control processes.
This approach improves **security, compliance, and traceability,** while simplifying the **operational management of users and corporate permissions**.
[Discover YooPoint, the IGA solution from E-time](https://www.e-time.it/contatti/index.md)
[Discover YooPoint](https://www.e-time.it/yoopoint.index.md)
[Contact us](https://www.e-time.it/contatti/index.md)
[Read More](https://www.e-time.it/en/yoopoint-iga-solution-identity-governance/index.md)
- [1](https://www.e-time.it/en/category/news-en/index.md)
- [2](https://www.e-time.it/en/category/news-en/page/2/index.md)
- [3](https://www.e-time.it/en/category/news-en/page/3/index.md)
-
E-time is a Software House and System Integrator specialized in IT consulting web based and mobile software development for companies, banks and insurance companies.
 
#### Services
#### Solutions
#### Quick Links
[Facebook-f](https://www.facebook.com/etime.engineering/) [Linkedin-in](https://www.linkedin.com/company/e-time-s-r-l-) [Youtube](https://www.youtube.com/channel/UC--BH5mdqdEg2xQn96RX-GA) [Instagram](https://www.instagram.com/_etimesrl_/)
© 2026 E-time Srl. All Rights Reserved | P.IVA IT03256040233
43829