Non-Human Identity Is Now Its Own IAM Discipline

On 25 November 2025, KuppingerCole published Leadership Compass LC80974 for Non-Human Identity Management, authored by Nitish Deshpande. The significance is not the vendor rankings. It is that a major analyst firm now treats NHI management as a distinct, rapidly maturing market segment with its own evaluation criteria, rather than a sub-feature of workforce IAM.

The Compass spans the full range of non-human identity: workloads, service accounts, applications, containers, APIs, and bots. KuppingerCole's framing puts the scale problem front and centre. NHIs outnumber human identities by 25 to 50 times in typical environments, which means a governance program built only for people is, by headcount, governing a small minority of the identities that actually touch production.

The most useful signal in the Compass is where the segment is converging. KuppingerCole positions NHI management as overlapping with Cloud Infrastructure Entitlement Management (CIEM) and secrets management, with DevOps, CI/CD, and Infrastructure-as-Code integration named as a core capability rather than a nice-to-have. That convergence is the analyst recognition of something we have argued for some time: the lifecycle of a service account or workload identity is created, scoped, and destroyed inside the delivery pipeline, not inside an IAM console.

Our reading is that this reframes a buying question into an architecture question. When NHI management, CIEM, and secrets management all describe the same underlying problem from different angles, the failure mode is buying three tools that each see a slice of the identity and none of which owns the whole lifecycle. The architectural implication is that non-human identity needs a single owner and a single lifecycle model spanning issuance, scoping, rotation, and decommission, with the delivery pipeline as a first-class control point. A category becoming its own Leadership Compass is the market catching up to a discipline that should already have a named owner inside the organisation.