Question 1

Who will actually do the work?

Accepted Answer

You work directly with the senior identity architect — 14+ years across Fortune 500 environments. Engagements aren't staffed out to junior consultants; the person scoping the work is the person delivering it.

Question 2

How do engagements start?

Accepted Answer

With a free 30-minute discovery call. We discuss your environment, goals, and constraints, then recommend the right engagement model. Most clients begin with a fixed-fee identity assessment.

Question 3

Do you work with our existing IT team or MSP?

Accepted Answer

Yes — most engagements are collaborative. The goal is to strengthen your team with senior identity expertise and leave them with documentation and runbooks, not to create a dependency.

Question 4

Are you available remotely or on-site?

Accepted Answer

Engagements are delivered remotely worldwide from the Dallas–Fort Worth area. On-site visits can be arranged when a project genuinely benefits from them.

Question 5

What platforms and technologies do you focus on?

Accepted Answer

Microsoft identity (Active Directory, Entra ID, hybrid sync, Conditional Access, PIM) plus AWS IAM governance, application access catalogs, access reviews, and infrastructure ops (DNS/DHCP/DCs). Rivitan Platform also includes an enterprise AI assistant and a production-grade API for automation.

Question 6

We're a small team — is this overkill for us?

Accepted Answer

No. Smaller teams often get the most value, because a focused assessment or a fractional retainer gives them senior expertise they couldn't justify hiring full-time. Scope is tailored to your size.

Question 7

Can you help us prepare for an audit (SOX, SOC 2)?

Accepted Answer

Yes. Access reviews, RBAC design, segregation of duties, and evidence collection are core to the governance work. Engagements map controls to your framework so audits go smoothly.

Question 8

Do you help retire ADFS or modernize hybrid identity?

Accepted Answer

Frequently. Migrating apps off ADFS to Entra ID authentication, moving to Password Hash Sync, and cleaning up hybrid sync are among the most common — and highest-value — projects.

Question 9

How do you handle access to our environment?

Accepted Answer

With least privilege and just-in-time access wherever possible. Specific access, accounts, and data-handling are agreed in writing before any engagement begins, and elevated access is removed at the end.

Question 10

Will changes risk disrupting our users?

Accepted Answer

Changes are rolled out carefully — report-only mode for Conditional Access, phased rollouts, and rollback plans for AD and migration work. Minimizing user disruption is part of the delivery approach.

Question 11

What do we get at the end of an engagement?

Accepted Answer

Clear deliverables: assessment findings and a prioritized roadmap, or for projects, the implemented changes plus documentation, runbooks, and a knowledge-transfer session so your team can own it.

Frequently asked questions

Working together

Scope & expertise

Security & logistics

Ready to simplify enterprise IAM?