IAM & AccessManagement

Three things: admin access to your identity provider and key apps, a decision owner (IT lead or similar) for approvals, and a list of your core applications with any compliance deadlines. We handle the rest.

Most implementations take 4 to 8 weeks depending on the number of applications and complexity. We start with your most critical apps and expand from there.

Usually not. We work with what you have: Okta, Entra ID (Azure AD), Google Workspace, or others. If a migration makes sense, we will tell you why.

With proper lifecycle automation, access is revoked automatically when HR updates their system. No manual chasing, no orphaned accounts.

Yes. We deliver the controls and evidence documentation that auditors look for: access policies, admin registers, JML runbooks, and architecture diagrams.

In most cases, yes. We connect identity provisioning to your HR system so joiners, movers, and leavers are handled automatically. If your current HR system does not support integrations, we can deploy HiBob for you. It is built for modern identity workflows and we have done multiple rollouts.

We work it out with you. Discovery is always included, so we scope your needs before quoting. If you have clear requirements, fixed project pricing works best. For complex or fast-changing environments, we recommend project plus managed. We'll tell you which fits after a scoping call.

No. We deploy incrementally, app by app, with clear comms before each change. Most users notice nothing except fewer password prompts.

We audit everything first. Apps that support SAML or OIDC get proper SSO. Apps that do not get password vaulting through 1Password, our recommended partner, or controlled workarounds. Nothing gets left behind or swept under the rug.

Absolutely not. Okta FastPass is biometric and on-device. You do not even pull your phone out. Passkeys and device trust mean users authenticate once and stay signed in across apps. We design for minimal friction, not security theatre.

Our IAM consulting starts with discovery: mapping your applications, current authentication flows, and compliance requirements. We then design the target architecture, implement SSO and MFA across your apps, build automation for joiners/movers/leavers, and document everything for audit readiness. Most projects are 4-8 weeks.

Yes. We are Okta specialists and have deployed Okta Workforce Identity across dozens of organisations. This includes SSO integration, MFA rollout, lifecycle automation, and advanced features like Okta FastPass and device trust. We also work with Microsoft Entra ID and Google Workspace for organisations on those platforms.

Okta implementation costs vary based on scope. A typical SMB deployment with SSO, MFA, and lifecycle automation runs £12,000-30,000 for the project, plus Okta licensing (roughly £6-12/user/month for Workforce Identity). Enterprise deployments with complex integrations and advanced features cost more. We provide fixed pricing after discovery.