Enterprise identity
Live
Custodeum
IAM and security operations
An identity operations platform that sits above Okta, Entra ID, Active Directory, and the rest of the stack.
Most large organisations already have more than one directory. The work still lands in separate consoles: a password reset in Okta, a privileged request in Entra ID, an access review in a spreadsheet, and a licence conversation that starts too late. Custodeum is the operational layer above those systems.
IAM, the service desk, and managers work in one product. Connectors bring identity providers, directories, and SaaS into a single view. Reviews, just-in-time elevation, support actions, and unused-access analysis keep their own workflows, but they share policy, evidence, and an audit trail.
Custodeum does not replace Okta, Entra ID, Active Directory, or Google Workspace. It works alongside them. Onboarding is consulting-led, and procurement can run through Azure Marketplace where that is the preferred path. A published customer programme unified more than 130,000 identities across ten-plus Okta tenants and reduced licence spend ahead of renewal.
What it does
Access reviews that can be finished
Campaigns arrive with peer-group context, last sign-in, and privileged flags. Reviewers approve or revoke in one step, and every decision becomes evidence.
Privileged access without standing admin
Just-in-time elevation across Okta, Entra ID, Active Directory, and Google Workspace, with justification, ticket context, policy checks, and automatic expiry.
Service desk actions without console sprawl
Password resets and everyday identity work stay inside a governed path, so support teams do not need broad directory rights.
Unused access and licence reclaim
Dormant seats and orphaned accounts are quantified across connected systems, with figures that can be taken into a renewal conversation.
AI Agent Gateway
Registered agents can request identity actions through policy. Custodeum verifies the agent, checks the allow-list, and can require a human approval before anything runs.
Who it is for
- IAM and security
- Service desk
- Managers and reviewers
- Audit and GRC