What's the difference between IGA and IAM?

“IAM asks 'can this person log in.' IGA asks 'should this person have this access, and can we prove it.' IAM handles authentication and SSO. IGA handles the lifecycle: provisioning, reviews, deprovisioning, and evidence. Most teams run both. Iden is the governance layer on top of your IAM.”