Identity and access management (IAM) is at the heart of corporate security, a difficult task with potential for great savings. By Mark Mayne