The journey
What actually happens, day by day.
No sandbox, no slideware. This is the sequence we run in every POC — on your HR feed and your systems.
Connect a system.
Pick your vendor from the catalog — Entra ID, Workday, SuccessFactors, Salesforce, ServiceNow — or connect anything else over generic REST, SCIM 2.0 or LDAP. Drop in a token; the wizard auto-discovers the schema, suggests the field mappings and tests them as you go.
- First sync in minutes — ≤ 15 for a typical system
- Training wheels on by default: every write queues for your batch approval until you remove the gate, per system
- Attribute selection decides, per field, what gets imported at all
See your whole access reality.
The first sync already answers the question most organisations can't: who has access to what — and is that what you expected? Quick Scan runs every relevant detector against the fresh data and turns it into concrete actions.
- Risk score per identity, with a readable breakdown — not a black box
- Orphan accounts, dormant grants, unowned service accounts, SoD conflicts, peer outliers
- Everything lands in one advisor inbox, prioritized
Turn patterns into governance.
Role mining reads your actual access patterns and proposes roles in plain language — "12 people in Finance share this access" — not cluster IDs. One click formalizes a proposal into a governed role. Policies get a visual builder with a live blast-radius preview.
- 8 mining algorithms, deduplicated, output as business stories
- Policy builder shows exactly how many identities a change touches — before you save
- Self-service requests route through approval chains you design visually
Prove it, continuously.
Governance you can't evidence is governance you don't have. Every reconciliation run compares expected against actual access and records a per-grant reason. Reviews run continuously or as campaigns, and audit packs generate from live data — not from a quarterly evidence-gathering scramble.
- Expected vs actual per grant: "expected via policy X" / "not expected — flagged"
- Audit trail is hash-chained and database-immutable — tampering is detectable
- SOX · ISO 27001 · HIPAA · GDPR packs, one click, from live data
