# Teleport Identity Governance

Manage on-demand access, privileges, and compliance for all your infrastructure.

## Grant on-demand access with role and resource requests

Provide your organization access with the right level of access granularity. Configure all aspects of the Access Request lifecycle in Teleport.

![Identity Governance](https://img.youtube.com/vi/9zo1mV2uZKE/sddefault.jpg)

## Identity Governance use cases

- ### [Request temporary elevated access](https://goteleport.com/docs/ver/17.x/identity-governance/access-requests.md)

  Eliminate standing privileges and get access as needed

- ### [Manage standing access for teams](https://goteleport.com/docs/ver/17.x/identity-governance/access-lists.md)

  Use Access Lists for group-based access

- ### [Monitor for risky access](https://goteleport.com/docs/ver/17.x/identity-governance/access-monitoring.md)

  Identify risky access patterns and behaviors

- ### [Instantly lock identities and sessions](https://goteleport.com/docs/ver/17.x/identity-governance/locking.md)

  Lock compromised users and resources

## Integrate your stack for greater efficiency and security

### [Okta](https://goteleport.com/docs/ver/17.x/identity-governance/okta.md)

Sync Okta users, apps, and groups with Teleport

### [Microsoft Entra ID](https://goteleport.com/docs/ver/17.x/identity-governance/entra-id.md)

Sync Entra ID users and groups to Teleport

### [Slack](https://goteleport.com/docs/ver/17.x/identity-governance/access-request-plugins/ssh-approval-slack.md)

Post Access Requests to your organization's Slack workspace

### [Jira](https://goteleport.com/docs/ver/17.x/identity-governance/access-request-plugins/ssh-approval-jira.md)

Manage Access Requests as Jira issues

### [PagerDuty](https://goteleport.com/docs/ver/17.x/identity-governance/access-request-plugins/ssh-approval-pagerduty.md)

Manage Access Requests through PagerDuty incidents

### [AWS Identity Center](https://goteleport.com/docs/ver/17.x/identity-governance/aws-iam-identity-center.md)

Organize and manage users' short- and long-term access to AWS accounts and permissions

### [Access Request plugins](https://goteleport.com/docs/ver/17.x/identity-governance/access-request-plugins.md)

## Make Teleport your SAML identity provider

### [Azure Portal & CLI](https://goteleport.com/docs/ver/17.x/identity-governance/idps/saml-microsoft-entra-external-id.md)

Integrate the Teleport SAML IdP with Microsoft Entra External ID

### [Google Cloud Console & API](https://goteleport.com/docs/ver/17.x/identity-governance/idps/saml-gcp-workforce-identity-federation.md)

Use Google Cloud Workforce Identity Federation to provision access

### [Grafana](https://goteleport.com/docs/ver/17.x/identity-governance/idps/saml-grafana.md)

Configure employee access to Grafana Enterprise instances

Turn Teleport into your SAML IdP:

- [ Getting started: Log in to external services with Teleport](https://goteleport.com/docs/ver/17.x/identity-governance/idps/saml-guide.md)
- [ About SAML IdP attribute mapping](https://goteleport.com/docs/ver/17.x/identity-governance/idps/saml-attribute-mapping.md)