Question 1

What is included in the free savings analysis?

Accepted Answer

We connect to your identity platforms and analyze license usage, entitlement patterns, and access data across Okta Workforce, Microsoft 365, and SaaS applications accessed via Entra ID or Okta. The output is a clear summary of savings opportunities with scenario modeling from low-risk to aggressive strategies.

Question 2

What does the paid advisory plan cover?

Accepted Answer

The paid advisory provides a sequenced execution plan with risk controls, stakeholder-ready reporting, and hands-on guidance to deliver savings safely. This includes detailed recommendations, monitoring during rollout, and controls designed to minimize operational disruption.

Question 3

Which platforms can you optimize?

Accepted Answer

Our primary focus is Okta Workforce license optimization. We also review Microsoft 365 and Office 365 license utilization, and SaaS applications that are accessed through Entra ID or Okta. The analysis covers unused seats, tier downgrades, and reclaimable licenses.

Question 4

How quickly can we see results?

Accepted Answer

The free analysis is typically completed within weeks of connecting your systems. Customers have realized meaningful savings within the first month of executing the advisory plan, often ahead of major contract renewal dates.

Question 5

What systems does Custodeum connect to?

Accepted Answer

Custodeum connects to identity platforms (Entra ID, Okta, Google Workspace, Active Directory, Exchange), SaaS applications (Adobe, Salesforce), service management tools (ServiceNow, ManageEngine), inventory sources (Snow), and supports SCIM-based integration patterns.

Question 6

Does Custodeum replace our identity provider?

Accepted Answer

No. Custodeum operates alongside your existing identity infrastructure. It connects to your identity platforms to provide unified visibility, governance workflows, and safe operational actions, without replacing Entra ID, Okta, Google Workspace, or Active Directory.

Question 7

How does Custodeum improve security?

Accepted Answer

Custodeum enables organizations to remove broad admin access from downstream identity systems. Support teams interact through role-based access models with defined guardrails, while the platform itself is delegated only the permissions required to perform allowed actions.

Question 8

How does Custodeum help with audits?

Accepted Answer

Custodeum produces structured, repeatable evidence for audit preparation. Governance campaigns generate exportable review records, and all platform actions are logged with actor identity and timestamps for end-to-end traceability.

Question 9

How is access to Custodeum itself controlled?

Accepted Answer

Custodeum implements a fine-grained RBAC model with granular permission definitions. The same model governs both UI and API access, ensuring precisely controlled permissions for every user.

Question 10

Can we automate joiner/mover/leaver workflows?

Accepted Answer

JML (Joiner, Mover, Leaver) automation is coming soon. We're building event-driven workflows that connect identity lifecycle events to your identity stack for zero-touch onboarding and instant offboarding. Contact us if you'd like early access or to help shape the product.

Question 11

Can we migrate SSO applications between identity platforms?

Accepted Answer

Yes. Custodeum includes migration tooling for moving SSO-integrated applications between platforms including Okta, Entra ID, Google Workspace, OneLogin, and Ping Identity, with staged users to minimize cutover disruption.

Question 12

Can we use Custodeum for M&A integration?

Accepted Answer

Yes. Our cloud-based connectivity allows you to connect target organization identity systems without on-premises network access, enabling rapid due diligence, discovery, and centralized management from day one.

Frequently Asked Questions

Cost Savings Advisory

Platform & Connectivity

Security & Compliance

Automation & Workflows

Ready to see what you could save?