Separate customer state
Each customer installation has its own service configuration, state, databases, secrets and private network.
Deployment & subscriptions
Start with a focused priority. Install one, two or all three products under separate signed subscriptions.
Build your offering
Separate subscriptions let you begin with a focused need and add complementary products when the scope grows.
Choose the products you would like to explore.
Discuss this offeringDeployment principles
The offering uses separate customer installations with product-specific services and operational responsibilities.
Each customer installation has its own service configuration, state, databases, secrets and private network.
Signed entitlements enable the products you purchase. Add complementary products as the deployment scope evolves.
Operator tooling can register customers and manage deployment entitlements. Customer consoles do not expose the operator registry.
Product navigation, subscription management and governed reconciliation connect the offering while native permissions remain enforced.
Each product retains native authentication and authorization. The shared workspace is distinct from unified single sign-on.
Microsoft collection uses approved service permissions and selected Azure subscriptions. Security Scan keeps evidence in a dedicated database.
Scope the first deployment
An identity lifecycle, privileged system or Microsoft security assessment.
Identity sources, target systems, gateway requirements and authorized cloud services.
Provisioning outcomes, session records or verified assessment results.
Protect Identity Solutions
Bring an identity journey, a critical system or a Microsoft security question. We will help you scope a product demonstration.