Bijection for IT
One access review, not eleven exports.
Identity, device and licence systems in one place, with an approver on every grant.
- Access requests
- Leavers
- Access reviews
- Licence reclaim
- New devices
- Unregistered apps
An access review means exporting users from Okta, licences from Microsoft 365, devices from the asset list and tickets from ServiceNow, then joining them in a spreadsheet that is out of date before it is finished.
Bijection keeps those records joined. Every grant records who approved it, every revocation is confirmed against the source systems, and the review becomes a query rather than a project.
Access requests
Starts: Someone asks for access in Slack or ServiceNow
- Show the requester’s role and what they already have.
- The system owner approves.
- The grant is made in Okta and recorded with its approver.
Leavers
Starts: HR marks an employee as leaving
- Revoke access in every connected system.
- Re-read each system to confirm the access is gone.
- Anything that failed stays open with an owner.
Access reviews
Starts: The start of each quarter
- Each manager gets the list of their team’s grants.
- They keep or revoke, one line at a time.
- Revocations are applied and confirmed.
Licence reclaim
Starts: A licence has gone unused for 60 days
- Ask the user whether they still need it.
- The request waits for an answer.
- Unclaimed licences are removed in Microsoft 365.
New devices
Starts: A laptop is ordered for a new joiner
- Link the device to the person and their start date.
- Wait for enrolment to be confirmed.
- Devices still unenrolled go to IT the day before the start date.
Unregistered apps
Starts: Every month
- Compare the apps in Okta with expense lines.
- List the apps nobody registered.
- Ask each buyer to register or cancel them.