What are some pain points you have faced while setting up IAM for your organization?

I was wondering what some of the pain points are and what I should be considering while I'm implementing IAM for my organization. Where can we start? And what do you recommend for managing IAM?

While I was implementing this, here's what I faced:

• Managing the IAM Lifecycle
• The complex and time-consuming process for onboarding and offboarding

What are some pain points you have faced, and what approach did you guys take to make it possible?