WALLIX launches Sovereign Identity Access, a sovereign‑identity solution deployable off‑cloud

The French group WALLIX announced on 7 October 2026 the launch of Sovereign Identity Access, a new identity and access management (IAM) offering. The solution is targeted at public administrations, critical‑infrastructure operators, industrial companies and highly regulated organisations, and it is designed to be both comprehensive and adaptable. It brings together multi‑factor authentication, single sign‑on, identity federation and lifecycle rights management, and it can be delivered either as a SaaS service or as a fully on‑premise deployment. WALLIX’s spokesperson explained that the product was co‑designed with a ministry to meet digital‑sovereignty requirements. This announcement underscores WALLIX’s intent to provide a versatile IAM platform that can satisfy the stringent needs of sectors that must protect sensitive data and comply with strict regulatory frameworks.

Context and challenges

In the press release, the WALLIX executive cited more than 43 million compromised accounts in France over the past year, a figure he presented as an illustration of the vulnerability of current authentication systems. Although the number has not been independently verified by a third party, it is used to highlight the urgency of adopting a more resilient approach. The executive emphasized that such a high level of compromise demonstrates how existing authentication mechanisms can be exploited and why organisations need stronger, sovereign‑controlled solutions.

At the same time, European legislative frameworks – notably the NIS2 directive, the DORA regulation and the Cyber Resilience Act – require critical entities to tighten access controls and ensure traceability of actions. These regulations impose concrete obligations on organisations that operate essential services, mandating that they improve their security posture and demonstrate compliance through auditable records. The combination of regulatory pressure and the rising frequency of cyber‑attacks creates a pressing need for sovereign‑identity solutions that can satisfy both legal and security demands.

Features of Sovereign Identity Access

From a functional perspective, the solution relies on a modular architecture that integrates multiple security layers. The authentication engine supports MFA (multifactor authentication) with biometric factors, one‑time passwords or certificates, while also enabling single sign‑on (SSO) for internal and cloud applications. Identity federation facilitates secure exchanges with external partners using standards such as SAML or OpenID Connect. Finally, lifecycle rights management ensures that creation, modification and revocation of access rights occur in real time, with detailed and immutable logging for compliance audits. WALLIX stresses that each of these capabilities is designed to work together seamlessly, providing a unified experience for administrators and end‑users alike.

• Multifactor authentication (MFA) – support for biometric factors, OTP and certificates.
• Single sign‑on (SSO) – seamless login to internal and cloud applications.
• Identity federation – secure exchanges via SAML, OpenID Connect and other standards.
• Lifecycle rights management – automated creation, modification and revocation.
• Full immutable logging – detailed traceability for audit requirements.

Off‑cloud deployment and data sovereignty

One of the distinctive aspects of Sovereign Identity Access is its ability to be installed entirely on‑premise, even within isolated networks that have no connection to any public cloud. In this mode, all user databases, authentication secrets and event logs remain hosted within the organisation’s own infrastructure, under the direct control of its IT and security teams. WALLIX notes that the same software stack can also be offered as SaaS for customers who prefer a hosted model, but the on‑premise version guarantees total data sovereignty.

The scope of identities covered by the solution goes beyond traditional employees. It includes partners, subcontractors, industrial systems (SCADA, IoT) and even artificial‑intelligence agents that interact with digital environments. Each entity receives a granular access profile that is centrally managed, allowing privileges to be limited to the strict minimum needed and reducing the overall attack surface. WALLIX states that this “by‑design” approach facilitates compliance with segregation‑of‑duties and least‑privilege requirements imposed by European regulatory frameworks.

Outlook and implications for organisations

By aligning Sovereign Identity Access with the requirements of NIS2, DORA and the Cyber Resilience Act, WALLIX offers a solution ready to be integrated into the compliance programmes of critical entities. The company’s spokesperson argues that the increased visibility over accesses, combined with the ability to keep logs on‑site, simplifies audits and reduces the risk of sanctions. Moreover, the possibility of deploying the solution in air‑gapped environments opens new opportunities for sensitive infrastructures such as power grids or transport systems, where operational continuity depends on total control of identities.

At present, affected organisations now have an additional option to strengthen their cybersecurity posture while asserting digital sovereignty. They can choose to migrate IAM processes to a platform that does not rely on an external cloud provider, yet still benefits from a modern, European‑compliant solution. WALLIX believes this flexibility should accelerate the adoption of sovereign‑identity practices and help reduce the number of compromised accounts, even though no independent evaluation has yet confirmed the real‑world impact of the offering.