Skip to main content

Know where your Okta or Auth0 tenant stands.

A senior architect rates six areas of your Okta or Auth0 tenant and hands you the scorecard, at no cost.

No cost, no obligationRead-only accessTwo and a half hours of your timeA scorecard you keep
In brief

The Short Version

What it is

A senior architect who builds these tenants for a living reads yours, area by area, and rates each one. You get the scorecard and a 30-minute readout, not a proposal.

Who it is for

Heads of IAM, security architects, and IT leaders responsible for a production Okta or Auth0 tenant. It suits teams who inherited a tenant, and teams who have not looked hard at it since rollout.

What it is not

It is not a penetration test, a compliance audit, or a full written report. We stay read-only and change nothing. The scorecard is yours whether or not we work together.

How it works

Three Sessions, Two and a Half Hours

  1. Intro Call

    30 minutes

    We talk through your environment and agree what the review covers. We put an agreement in place before we look at your tenant.

  2. Tenant Review

    90 minutes

    A senior architect goes through the six areas in your tenant with you. You grant read-only visibility beforehand, so the session goes to findings rather than setup.

  3. Readout

    30 minutes

    We walk you through the scorecard: how each area rated, the top five findings, and what we would do first. You keep the scorecard either way.

There is no booking link. Send the request and we reach out within the next week to schedule the intro call.

What we review

The Six Review Areas

We rate every area and rank the findings, so you can see where to spend effort first. Pick your platform to see what we look at in each area.

Your platform

Showing the Okta Workforce Identity Cloud (WIC) view.

Access Security

Okta Workforce
MFA coverage, which factors are still permitted, and how many people hold admin privilege.

Policy Hygiene

Okta Workforce
Global session policy, authentication policies, password rules, and attack protection settings.

Application Integration Health

Okta Workforce
SSO coverage, apps still on SWA or a legacy protocol, and the provisioning error queue.

Lifecycle automation

Okta Workforce
Whether an HRIS is the source of truth, how group rules are driven, and how leavers are removed.

Visibility

Okta Workforce
Log retention, whether events stream to a SIEM, and ThreatInsight and ITDR readiness.

Platform and Roadmap

Okta Workforce
Features you own but do not use, anything facing deprecation, and where orchestration would remove manual work.

We review Okta Workforce Identity Cloud (WIC), Okta Customer Identity Solution, and Auth0 Customer Identity Cloud (CIC) tenants.

The deliverable

What You Walk Away With

  1. A scorecard (PDF) rating each of the six areas red, amber, or green.

  2. The top five findings, each ranked High, Medium, or Low priority.

  3. Recommended next steps for the findings that matter most.

  4. A 30-minute readout with the architect who ran the review.

The check ends with the scorecard and the readout. A full written report is not part of it.

ApivantHealth Check · Sample tenant · v1.0

Okta Identity Platform Review

Findings and recommendations for a sample Workforce Identity Cloud tenant

1.0 Tenant health score

71/ 100Grade B
Overall risk
Medium
Controls at risk
14 of 47 assessed

2.0 Domain scores

DomainScorePassAt riskRating
Access Security6453Amber
Policy Hygiene8271Green
Application Integration Health5145Red
Lifecycle automation6962Amber
Visibility8861Green
Platform and Roadmap7352Amber

3.0 Key findings

  1. §7.2Require phishing-resistant MFA for every administrator role.Do now
  2. §9.1Move the eleven apps still on Secure Web Authentication to SAML or OIDC.Do now
  3. §12.4Drive leaver deprovisioning from the HR system rather than a ticket.Do next
Apivant · Confidential to the clientPage 1 of 24
Sample report, page oneIllustrative data. The real report is built from your tenant.

Questions

Is it really free?

Yes. There is no cost and no obligation, and you keep the scorecard whether or not we ever work together. We do it because it is how we meet the teams we want to work with.

What access do you need?

Read-only visibility into the tenant configuration for the length of the review, usually a read-only admin role. We never hold write access, and we change nothing. You revoke the access after the readout.

Do we sign anything?

Yes. Before we look at your tenant we sign a mutual NDA, which covers the configuration we see and the scorecard we produce. We send it after the intro call. It is the only paperwork the free check needs.

Who needs to attend?

Someone who administers the tenant day to day, and whoever will act on the findings. The sponsor only needs the intro call and the readout.

How long does it take?

Two and a half hours of your team's time, across three sessions. The calendar length depends on how quickly we can book those three.

How do you rate each area?

Against leading practices for the platform you run. Green means the area is in good shape, amber means there is work to plan, and red means something we would fix first.

Which platforms do you cover?

Okta Workforce Identity Cloud (WIC), Okta Customer Identity Solution, and Auth0 Customer Identity Cloud (CIC). Each of the six review areas has a view for each platform. Use the toggle above to see yours.

What happens after the readout?

That is up to you. The scorecard is yours and there is no obligation. If you want help working the findings, say so on the readout and we will talk it through.

Request one

Request a Health Check

Tell us where to reach you and what we are looking at. We reach out within the next week to schedule the intro call.

We use this to reply and to send the scorecard.

A rough number is fine.

Platforms in use

Select all that apply.

A sentence or two is enough.

Okta and Auth0 are trademarks of Okta, Inc.