Identity Management · Identity & Access Management
Who has access?
To what?
On what grounds? Until when?
Four simple questions most companies can't answer without opening a spreadsheet.
How SEK works
Four business problems, one integrated coverage
Each discipline solves a concrete problem, with results measured in the program.
“I don't know who has access to what in the company.”
Identity governance (IGA + IAM)
Automated lifecycle, continuous access reviews, provisioning and revocation. SailPoint and Ping Identity, with SOX and LGPD compliance built in.
“Our admin account was compromised and nobody saw it.”
Privileged access control (PAM)
Credential vault, just‑in‑time access, recorded and audited sessions. Removes shared passwords and standing access. Palo Alto Networks Idira.
“Digital onboarding loses 30% of customers halfway through.”
Customer identity (CIAM)
Passwordless login with passkeys and FIDO2, adaptive MFA, LGPD consent and fraud prevention in the digital channel. Ping Identity.
“Our AI agents have more access than any human.”
Machine and AI identity
Verifiable identity and short‑lived credentials for agents and workloads, contextual authorization over APIs, tools and MCP, and an audit trail for every action. Decentralized identity (DIDs).
What's included
Six identity disciplines
What changes in practice
Well‑managed identity reduces risk, speeds up the operation and delivers audit evidence without stopping the company.
Access revocation on offboarding
Today it takes days or weeks. With an event‑driven lifecycle, the exit recorded by HR revokes access within minutes, with no manual tickets.
Access reviews
The yearly campaign of emails and spreadsheets gives way to continuous review. Ownerless accounts and accumulated access stop piling up between one audit and the next.
Access approval
An access catalog in business language, with approval proportional to risk. Managers understand what they are approving, and critical access gets tighter control.
Customer login time
Passwordless login and risk-adaptive authentication take the friction out of onboarding and returning sign‑ins, without giving up security.
Fraud in the digital channel
In telecom operations, fraud prevention built into the login journey cut fraud without affecting the legitimate customer's experience.
Privileged access on demand
Privilege granted at the moment of use and revoked on its own. Recorded sessions with a trail of who did what, ready for SOX, LGPD and external auditors.
Results observed in projects delivered by SEK. Percentages are the highest recorded and vary by environment and scope.
Why SEK
From choosing the platform to running it day to day
Most vendors stop at the project. SEK covers the whole cycle with the same team, with in‑house accelerators that shorten deployment and reserved capacity to act immediately when something goes off plan.
The team that implements is the team that operates, so knowledge of the environment is not lost when the project becomes day‑to‑day operation.
Strategic partners
Best of breed — the right technology for each use case
Governance · IGA
The leading platform for enterprise identity governance. SEK is the only SailPoint Delivery Admiral integrator in Latin America, for the sixth year running.
Authentication · CIAM
Authentication and CIAM for workforce and customers. SEK was the first IAM integrator in Latin America to operate as a Ping Delivery Approved Partner, and took the platform to Brazil's 10 largest banks.
Privileged access
Palo Alto Networks Idira
PAM with a vault and automatic credential rotation, just‑in‑time elevation towards Zero Standing Privilege, and recorded privileged sessions.
Secrets · Identity protection
HashiCorp · Silverfort
Secrets vault and workload credentials with HashiCorp. MFA and identity protection for legacy systems and service accounts with Silverfort.
How it works
From diagnosis to operation
Fast Resilience Assessment (FRA): 50 minutes to measure identity maturity and prioritize by risk, not by product.
Access model, roles and access-review rules, defined before the tool is chosen.
Integration with the chosen vendor, phased migration and knowledge transfer to the internal team.
Continuous access reviews instead of the yearly campaign, privilege management and tracking of the identity indicator in Nautilus.
Next step
Start with the diagnosis
Fifty minutes with a specialist to assess where your identity program stands and where to start.