Skip to main content
Identity and Access Management (IAM) is a comprehensive solution that centralizes the management of your users and their access to applications.

​
Key challenges of Identity and Access Management

IAM helps address critical access management challenges:
  • Uncontrolled access to systems and sensitive data
  • Manual and time-consuming access management
  • Lack of regulatory compliance
  • Poorly managed identity lifecycle
  • Shadow IT (unlisted applications)

​
Key features of Primo’s IAM solution: SaaS Management

  1. Automated onboarding/offboarding – Account creation/deletion of your employees
  2. Custom SSO – Single Sign-On for your applications
  3. License management – Cost optimization through intelligent allocation
  4. Group and role management – Automatic permission assignment by team

​
Automate provisioning at onboarding

Primo automatically synchronizes your employees with more than 30 natively integrated applications (Google Workspace, Entra, Notion, Slack, AWS, 1Password, Dashlane, Datadog, Figma, etc.). Simplify new employee onboarding:
  • Automatic access and license assignment in one click
  • Attribute templates (role, teams, licenses, etc.)
  • Choice of identity provider (Entra, Google Workspace, Primo)
You can also independently connect your team applications and business applications.

​
Automate deprovisioning at offboarding

Secure employee departures:
  • Scheduled removal of access
  • Data transfer management (Drive, emails) for Google Workspace and Entra
This prevents security risks linked to persistent access, data loss, or ongoing billing for former employees.

​
Manage roles and access

Control user rights with precision:
  • Centralized identity management
  • Group assignment and simplified rights management
Automate the enforcement of your access policies, gain consistency and granularity, and simplify compliance audits.

​
Map identities (Shadow IT)

Gain full visibility into your SaaS application usage:
  • Track licenses used vs. licenses paid
  • Detect unused licenses
  • Map applications by user
Increase visibility across all your SaaS and monitor actual costs.

​
Glossary

​
Single Sign-On (SSO)

Authentication method allowing a user to access multiple applications with a single credential (e.g., logging into Notion with Google). Benefits: simplified password management, improved user experience, stronger security.

​
System for Cross-domain Identity Management (SCIM)

Standardized protocol that automates the full user lifecycle (creation, updates, deletion) in applications via the identity provider.

​
Just-in-Time (JIT) provisioning

Automatic user creation upon first login via SSO, without prior manual configuration. Compatible applications: Notion, Asana, Zoom

​
SSO tax

Practice by some SaaS vendors of charging an additional fee to activate SSO or SCIM features, treating security as a premium option. Learn more: The SSO Wall of Shame