Skip to content

Building an IAM platform — what shipped in May

A build-in-public note on connectors, website, audit readiness, and the practical shape of founder-led infrastructure.

Gowtham Palanisamy · 2026-05-21 · 7 min read

A build-in-public note on connectors, website, audit readiness, and the practical shape of founder-led infrastructure.

What shipped

What shipped is where the access problem becomes visible. The useful question is not whether identity teams should care. They already do. The question is whether the workflow catches the change before a ticket, renewal, or auditor catches it first.

For building an iam platform — what shipped in may, the winning pattern is simple: start with the source of truth, run the change through a governed workflow, and store evidence as a byproduct. That keeps IT work out of ad hoc Slack threads and puts it back into a system you can replay.

What still needs proof

What still needs proof is where the access problem becomes visible. The useful question is not whether identity teams should care. They already do. The question is whether the workflow catches the change before a ticket, renewal, or auditor catches it first.

For building an iam platform — what shipped in may, the winning pattern is simple: start with the source of truth, run the change through a governed workflow, and store evidence as a byproduct. That keeps IT work out of ad hoc Slack threads and puts it back into a system you can replay.

Why lifecycle automation matters

Why lifecycle automation matters is where the access problem becomes visible. The useful question is not whether identity teams should care. They already do. The question is whether the workflow catches the change before a ticket, renewal, or auditor catches it first.

For building an iam platform — what shipped in may, the winning pattern is simple: start with the source of truth, run the change through a governed workflow, and store evidence as a byproduct. That keeps IT work out of ad hoc Slack threads and puts it back into a system you can replay.

What the next customer sees

What the next customer sees is where the access problem becomes visible. The useful question is not whether identity teams should care. They already do. The question is whether the workflow catches the change before a ticket, renewal, or auditor catches it first.

For building an iam platform — what shipped in may, the winning pattern is simple: start with the source of truth, run the change through a governed workflow, and store evidence as a byproduct. That keeps IT work out of ad hoc Slack threads and puts it back into a system you can replay.

Get the operator note.

A short monthly email on identity lifecycle, SaaS access gaps, and what KINT ships next.

More from KINT