Tactical Solutions IAM Capabilities

Discover Tactical Solution extensive implementation experiences and

large pool of high quality and highly skilled IAM experts in

all major IAM vendor technologies.

Okta

Okta Identity Cloud is a leading SaaS-delivered converged IAM platform broadly used across both workforce and CIAM use cases. Newly acquired Auth0 Platform is a SaaS product commercialized for CIAM and developer use cases. Recent product innovations include Auth0’s private cloud deployment option on Azure, some identity thread detection and response (ITDR) functions, and sign-in services with Ethereum via partnership with Spruce. Okta Identity Cloud has added FastPass – new passwordless security capabilities, custom admin roles and IGA features.

Tactical Solution has been Okta’s preferred and trusted partner in Canada since 2016. Tactical Solution has provided many Okta advisory and implementation services to many large organizations in Canada in telecom, banking, retail, technology and healthcare sectors.

Tactical Solution has a team of highly skilled and certified Okta Consultants and Okta Developers both onshore and offshore who can provide services in both EIAM and CIAM implementations.

Auth0

Auth0 is known for its developer-focused products. Auth0 has a strong focus and specialization in customer identity and access management (CIAM), for both B2C and B2B scenarios. It also has one of the most-extensive lists of BYOI integrations, including support for Apple’s new Sign-in With Apple (SiWA) authenticator and support for some government IDs.

Newly acquired by Okta. Recent product innovations include Auth0’s private cloud deployment option on Azure, some ITDR functions, and sign-in services with Ethereum via partnership with Spruce.

Tactical Solution has been Auth0’s trusted partner in Canada since 2020 prior to its acquisition. And Tactical solution has provided Auth0 CIAM advisory and implementation services to large organizations in Canada in banking and lottery sectors since 2020.

Tactical Solution has a team of highly skilled and experienced Auth0 Architects and Developers both onshore and offshore who can provide services in CIAM implementations.

Entra ID

Microsoft Entra ID product is a leading SaaS-delivered converged IAM platform, sold as part of a rebranded IAM product family named Microsoft Entra that also includes cloud infrastructure entitlement management (CIEM) and decentralized identity (DCI) services, has become market share leader for workforce AM.

Recent product innovations include improved session management controls with continuous access evaluation (CAE) for Microsoft apps, some identity thread detection and response (ITDR) capabilities, delegated administration and scalability improvements.

Tactical Solution has delivered enterprise access management (EAM) implementation projects using Entra ID for several large organizations in Canada in government, retail and banking sectors in the past few years.

Tactical Solution has a team of highly skilled and experienced Entra ID Architects and Developers both onshore and offshore who can provide services in EIAM implementations.

Azure AD B2C

Microsoft Azure AD B2C product is a SaaS-delivered converged CIAM platform and is designed to meet the core CIAM needs of both large and small organizations. The solution is a nice fit for firms well-versed in Azure AD and Entra skills that have a minimal number of on-prem business applications needing CIAM integration.

The solution provides strong consent management configuration and large deployments. However, the solution lags in data mapping and transformation orchestration workflows, admin user and role management, and simple authentication.

Tactical Solution has delivered an end to end green field CIAM implementation using Azure AD B2C on the cloud for a financial institution in Canada. Customized user interface and user journey using Microsoft Identity Experience Framework, Azure Front Door etc.

Tactical Solution has highly skilled and experienced Entra ID Architects and Developers both onshore and offshore who can provide services in Entra ID B2C implementations.

ForgeRock

ForgeRock is a leader in both CIAM and AM. ForgeRock’s AM and IDM products are delivered as SaaS (ForgeRock Identity Cloud) or software (ForgeRock Identity Platform). Most of ForgeRock’s AM clients use its software product, broadly across workforce and CIAM use cases. Most ForgeRock AM SaaS clients use its products for CIAM.

ForgeRock offers flexible journeys to map complex CIAM use cases. It offers robust data orchestration, admin role and user management, integration with identity verification solutions, capable consent management features, a range of password-based and passwordless authentication options, and flexible customer self-service workflow configuration.

ForgeRock offers one of the best product capabilities, including strong SDK offerings, APIs and documentation, support for hosting customer pages and containers (Docker, Kubernetes). The product offers a good balance in features for internal and CIAM as well as developer use cases.

Tactical Solution has delivered many EIAM and CIAM implementation projects using ForgeRock for several large organizations in North America in banking, telecom and auto sectors in the past many years.

Tactical Solution has a team of highly skilled and certified ForgeRock architects and engineers both onshore and offshore who can provide services in both CIAM and EIAM implementations.

Ping Identity

Ping Identity is a Leader in EAM and CIAM. Its AM products are sold under the PingOne Cloud Platform in several bundles and modules as multitenant SaaS, single-tenant SaaS (PingOne Advanced Services), and software. Its operations are geographically diversified and its clients tend to be large organizations using both on-premises and cloud deployments at similar proportions, broadly across internal EAM and CIAM use cases.

Recent product innovations include the launch of its orchestration tool (PingOne DaVinci), online fraud detection (PingOne Fraud) and DCI functions with verifiable credentials. Ping Identity was acquired by Thoma Bravo in August 2022.

Tactical Solution has delivered many EIAM and CIAM implementation projects using Ping for several large organizations in North America in telecom, lottery and healthcare sectors in the past many years.

Tactical Solution has a team of highly skilled and certified Ping architects and engineers both onshore and offshore who can provide services in both CIAM and EIAM implementations.

SailPoint

SailPoint is one of the most innovative IGA vendors which provides industry leading governance and compliance, end-to-end processes for access management, effective balance of preventive and detective controls, operational efficiency and excellent end-user experience. The SailPoint Identity Platform offers best-in-class embedded AI/ML for a variety of use cases such as access requests, access certification, and role mining. The platform is especially strong for user lifecycle management, compliance management, and integrations with both target applications and supporting systems.

Tactical Solution has been SailPoint’s trusted partner in Canada since 2016. Tactical Solution has provided many SailPoint advisory and implementation services to many large organizations in Canada in banking, retail, technology, government and financial investment sectors.

Tactical Solution has a team of highly skilled and certified SailPoint Architects and SailPoint Developers both onshore and offshore who can provide services in IGA implementations.

Saviynt

Saviynt Enterprise Identity Cloud is a leading cloud identity and governance platform known for SaaS delivery, fast deployment, single-tenant and low initial investment. It offers strong user provisioning, access request and approval workflows, along with integrations to target applications and supporting systems. The SoD enforcement is exceptional, with clear view of apps, cross-app, reason for violation, and impact of remediation. Saviynt is best for organizations that want to get up and running quickly with a single-tenant SaaS offering.

Tactical Solution has delivered several Saviynt IGA implementation projects to large organizations in North America in energy, higher education and financial institution sectors in the past few years.

Tactical Solution has a team of highly skilled and certified Saviynt architects and developers both onshore and offshore who can provide services in IGA implementations.

Oracle

Oracle used to be the leader in IAM space several years ago. Oracle IAM products are offered as software (Oracle Identity Governance [OIG aka OIM], Oracle Access Manager [OAM]) and SaaS (Oracle Cloud Infrastructure Identity and Access Management [OCI IAM]) options.

Oracle Identity Governance (OIG) is best for organizations with a need for solid user provisioning, SOD enforcement and many customization capabilities that still have many workloads on premises, especially for complex ERP systems and databases.

Oracle Access Manager is mostly used for workforce use cases. Recent product innovations include deeper integration of Oracle’s SaaS AM product with Oracle Cloud, resilience enhancements with cross-region DR and an adaptive risk microservice.

Tactical Solution had been the leader and pioneer in Oracle IAM implementation and integration in Canada in the past many years. Tactical Solution successfully delivered many large complex Oracle IAM implementations / integrations in Canada. Our clients were mainly in the enterprise market sector across Canada and include provincial government, government agencies, healthcare, telecom, insurance, major financial institutions and many other sectors. Tactical Solution has 100% referenceable customers.

Tactical Solution still has a team of highly skilled Oracle IAM architects and developers both onshore and offshore who can provide services in both EIAM and CIAM implementations.

One Identity

One Identity aims for unified identity-centric cybersecurity. With a unique combination of offerings including a portfolio of identity governance, access management and privileged management, and identity as a service that help organizations reach their full potential, unimpeded by security yet safeguarded against threats. One Identity has proven to be a company unequalled in its commitment to its customers’ long-term IAM success. More than 7,500 customers worldwide depend on One Identity solutions to manage more than 125 million identities, enhancing their agility and efficiency while securing access to their data — wherever it might reside.

One Identity is a leader in Privileged Access Management. One Identity provides PASM functionality with its Safeguard product, available through either software, hardware, or SaaS, software-based PEDM functionality with Privilege Manager for Windows/UNIX/Linux/macOS, and Safeguard authentication services for AD bridging functionality. It also offers a secrets management tool called Safeguard Secrets Vault/Broker. Safeguard is a leader in privileged session management and PEDM for both Windows and Linux/UNIX/macOS.

One Identity Manager is best for organizations that want to build their IGA program around a risk model and have confidence in the vendor’s vision and execution plan for unified, identity-centric cybersecurity.

One Identity acquired OneLogin in October 2021. OneLogin is a SaaS-delivered AM product with converged lightweight identity administration features. Excellent customer experience in ease of management and administration, integration and deployment.

Tactical Solution has been One Identity’s trusted partner in Canada since 2020. Tactical Solution has been working closely with One Identity in retail space in Canada and can provide advisory and implementation services.

CyberArk

CyberArk is a Leader in Privileged Access Management. CyberArk offers privileged account and session management (PASM) functionality with Privileged Access Manager, (SaaS or software) privilege elevation and delegation management (PEDM) functionality with its Endpoint Privileged Manager (EPM) tool, secrets management and application management with Secrets Manager and cloud infrastructure entitlement management (CIEM) functionality with Cloud Entitlements Manager. It also offers a remote PAM tool called Vendor Privileged Access Manager.

CyberArk has delivered many connectors and integrations with adjacent technologies, su ch as ITSM and identity governance and administration (IGA) tools. CyberArk’s PAM offering is very competitive, offering some of the most mature capabilities in the market.

Tactical Solution delivered many CyberArk projects with strategic partners since 2022 and has a large team of CyberArk experts who have extensive experience and are also CyberArk CDE or Guardian certified.

Delinea

Delinea is a Leader in Privileged Access Management, representing the combination of two former companies (Centrify and Thycotic) that were Leaders in PAM.

PASM functionality is now covered by the Secret Server product from Thycotic. PEDM is covered by Privilege Manager from Thycotic. Server PAM, Authentication Service products and AD bridging tools are from Centrify. Both of these products are available as software or SaaS. DevOps Secrets Vault is the secrets management product.

Delinea is strong in life cycle management for service accounts, and for managing privileged access to databases.

Tactical Solution has been both Centrify and Thycotic and then Delinea’s trusted partner in Canada. Tactical Solution has a team of highly skilled and certified Thycotic consultants both onshore and offshore who can provide services in Delinea implementations.

BeyondTrust

BeyondTrust is a Leader in Privileged Access Management. PASM services are provided by Password Safe, (SaaS or software) with PEDM functionality provided by its Privilege Management and AD bridging tools. Secrets management is provided by DevOps Secret Safe and BeyondTrust also offers CIEM functionality with its Cloud Privilege Broker tool.

BeyondTrust offers comprehensive Windows/Linux/UNIX/macOS agent-based PEDM, privileged access logging, reporting and audit, analytics and response. It is strong for its performance and scalability, availability and recoverability capabilities.

Tactical Solution has a team of highly skilled and certified PAM consultants both onshore and offshore who can provide services in BeyondTrust implementations.

Entra PIM

Privileged Identity Management (PIM) is a service in Azure Active Directory (Azure AD) that enables organizations to manage, control, and monitor access to important resources. These resources include resources in Azure AD, Azure, and other Microsoft Online Services such as Microsoft 365 or Microsoft Intune.

PIM is a SaaS solution for Privileged Access Management (PAM) for a quick win.PIM provides a time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions to important resources. These resources include resources in Azure Active Directory (Azure AD), Azure, and other Microsoft Online Services such as Microsoft 365 or Microsoft Intune.

PIM enables Organization to allow a specific set of actions at a particular scope. Key features include:

⦿ Provide just-in-time privileged access to resources
⦿ Assign eligibility for membership or ownership of privileged access groups
⦿ Assign time-bound access to resources using start and end dates
⦿ Require approval to activate privileged roles
⦿ Enforce multifactor authentication to activate any role
⦿ Use justification to understand why users activate
⦿ Get notifications when privileged roles are activated
⦿ Conduct access reviews to ensure users still need roles
⦿ Download audit history for internal or external audit

Tactical Solution has successfully designed and implemented PIM from scratch with Zero-Trust framework for a Canadian financial institution together with Azure AD implementation.

Tactical Solution has a team of highly skilled architects and developers both onshore and offshore who can provide expert services in PIM implementations

IBM

IBM Verify IAM portfolio offers Zero Trust principles and a risk-based approach.IBM Security Verify Governance has solid user provisioning, access certification, and SoD enforcement capabilities. It exhibits best-in-class risk management capabilities aimed at achieving least privilege access.

IBM’s Verify Governance is best for customers that want to build IGA around a strong risk management model.

IBM’s CIAM solution offers a security fabric between users, devices, and connections. IBM’s track record in adaptive/risk-based authentication and online fraud management via the Trusteer product line creates a solid platform and starting point for the vendor to build on its CIAM solutions. IBM’s CIAM solution is a good fit for firms looking for cutting-edge risk-based authentication and easily customizable self-service screens, including consent version management.

Tactical Solution has a team of highly skilled architects and developers (ex-IBMers) who can provide expert services in ISVA/ISAM/ISIM/ISDS implementations. And currently Tactical Solution has resources working on ISVA and ISDS implementation projects for some major Canadian financial and retail customers.

Omada

Omada is one of the leaders in modern identity governance.

Omada is one of the leaders in modern identity governance. The Omada Identity platform excels in role management and has very strong access request and approval and access certification capabilities. Dashboards and reporting are highly configurable, with more than 100 out-of-the-box reports and the ability to drill down for detail and take action directly from the dashboards. Reference customers cited user provisioning, access request and approval, and role management as top features. However, data access governance depends largely on Omada’s partners, and the vendor’s cloud and SaaS governance capabilities are limited. Omada is best for organizations that want well-organized IMG processes aligned to a role-based access control (RBAC) approach.

Tactical Solution has a team of highly skilled architects and developers who can provide expert services in Omada implementations.

More Services

Identity Governance and Administration

Enterprise Access Management

Privileged Access Management

Customer Identity and Access Management

We offer integrated identity and access management solutions for hybrid infrastructures, ensuring secure access and visibility. Our comprehensive capabilities govern identities, manage access, and provide insights, enabling Zero Trust implementation.