What is the purpose of the IAM client software?

Users rarely know what group they want, or even that they need to request a group membership. They know what they want to access – a share, folder, SharePoint site, printer, mail DL, etc. One way to address this is to wait for users to try to access a resource, intercept the "access denied" error message and redirect the user to the appropriate request page, where they can see a list of groups with access to the resource and select an appropriate entitlement to request. Read more here: https://hitachi-id.com