Revocation in IGA is the withdrawal of an account, entitlement, role, credential, session or authorization. It can follow a lifecycle event, access-review decision, policy violation, risk change, expiry or emergency action.
An effective IGA process records the decision, executes removal across downstream systems and verifies completion. Marking a task complete without checking the target is not verified revocation.