Zero trust is a security model that does not grant implicit trust based only on network location or prior access. It continuously evaluates identity and context, enforces least privilege and assumes that compromise is possible.
IGA supports zero trust by maintaining trusted identity data, governing access eligibility, reducing standing privilege, enforcing lifecycle changes and supplying evidence. Zero trust is an architecture and operating model, not a single product.