Managed identity services and one-time engagements
Identefi provides two service types: ongoing managed services billed per user per month, and fixed-scope one-time engagements for assessment, onboarding, and remediation work.
Ongoing identity operations
Monthly service. Billed per user. Requires a completed Identity Assessment before onboarding. All tiers include access to the Identefi client portal for status and reporting.
Starter
The Starter tier provides consistent monitoring and enforcement of your Microsoft Entra baseline. Right for organizations that need documented identity controls but do not yet need active lifecycle management.
Start with AssessmentStandard
Standard adds active joiner/mover/leaver operations and access governance. Right for organizations actively hiring or restructuring, or those preparing for compliance requirements.
Start with AssessmentAdvanced
Advanced provides the full identity operations function. Right for compliance-driven organizations, those with complex Entra environments, or those requiring audit-ready documentation and SLA-backed support.
Start with AssessmentFixed-scope professional services
Project-based engagements with fixed scope and fixed price. Most one-time services are prerequisites for or complements to managed services — they are not standalone substitutes for ongoing identity management.
Identity Assessment
A structured audit of your Microsoft Entra environment across eight identity domains. Delivers a written report with a tenant health score, prioritized remediation list, and recommended service tier. Required before onboarding to any managed service tier.
- Tenant health score (0–100)
- Findings report across 8 identity domains
- Prioritized remediation list
- Recommended service tier
Onboarding
Remediation of critical gaps identified in the assessment, followed by baseline configuration of all required identity controls. Sets the foundation for ongoing managed services.
- MFA enforcement via conditional access
- Privileged role cleanup
- Offboarding process setup
- Baseline conditional access policies
- Power Automate workflow deployment
Migration
Tenant-to-tenant migration, Azure AD B2B consolidation, or transition from a legacy identity provider to Microsoft Entra ID. Scoped after discovery.
- Pre-migration tenant discovery
- User and group migration
- App registration transfer
- Conditional access policy rebuild
- Post-migration validation
Custom SSO Integration
SAML 2.0 or OIDC integration of a third-party application with Microsoft Entra ID. Includes testing, documentation, and handoff.
- App registration in Entra ID
- SAML or OIDC configuration
- Attribute mapping and claims setup
- User assignment configuration
- Integration test documentation
Incident Cleanup
Post-incident identity remediation following a compromise, unauthorized access event, or phishing. We contain the exposure, remove persistence, and rebuild your identity controls.
- Compromised account identification
- Session revocation and credential reset
- OAuth grant audit and cleanup
- Admin role review
- Post-incident remediation report
What we don't do
Identefi is a specialist provider. Our scope is identity and access management within Microsoft Entra ID. The following services are explicitly out of scope — not because they are unimportant, but because specialist delivery requires clear boundaries.
We do not do helpdesk. If you need end-user IT support, password resets, or device troubleshooting, that function belongs with your internal IT team or a generalist MSP.
We do not do helpdesk. Password resets, device issues, and end-user troubleshooting are out of scope. These functions require different tooling, staffing, and SLAs. Your Microsoft 365 partner or internal IT handles these.
Device enrollment, compliance policy, and endpoint configuration are separate from identity management. We work alongside your endpoint management solution but do not operate it.
Data backup for Exchange, SharePoint, and OneDrive is outside our scope. These are distinct services with dedicated tooling.
Defender for Office 365, anti-phishing policies, and email flow rules are not included. Identity and email security overlap in some areas (like MFA), but email security operations are a separate function.
We are not a network security provider. Conditional access in Entra ID can enforce named location policies, but firewall configuration is outside our scope.
We do not provide general IT strategy, vendor selection, or technology roadmap consulting beyond the identity domain. Our scope is narrow by design.
Built on Microsoft's identity platform
All Identefi services are delivered within your existing Microsoft 365 environment. No new platforms to license, no third-party identity vendors to evaluate.
Microsoft Entra ID
The identity platform at the center of all our services. We configure, monitor, and operate within your Entra tenant. Licenses remain yours.
Power Automate
Lifecycle workflows — provisioning, deprovisioning, and access change notifications — are built and maintained in Power Automate.
Power BI
Identity operational dashboards for Advanced tier clients. MFA coverage, role assignments, sign-in anomalies, and lifecycle metrics in one view.
Every engagement starts with an assessment
We do not onboard clients to managed services without first auditing their environment. The assessment determines scope, identifies critical gaps, and ensures the right service tier is recommended.