Solution for Microsoft environments
IGA for Microsoft environments
Build the governance layer on top of your Microsoft strategy.
Entra ID controls who can sign in. Auditors, NIS2, and ISO 27001 ask something else: who has access to what, why do they have it, and who approved it? Answering that takes a governance layer on top of the foundation you already have, not a new platform.
The starting point
Access control and access governance are two different jobs
Most organizations share the same foundation: AD DS on-premises, Entra ID in the cloud, and Microsoft 365 as the workplace. Sign-in, MFA, and conditional access are in place and do not need rebuilding.
Access control answers the technical question: who can sign in? Access governance answers the organizational one: who has access to what, why do they have it, and who approved it? The second question is about processes, accountability, and documentation, and it is the one auditors and regulators ask.
The route to compliance runs through a layer on top of the platform you already have.
Why it is urgent now
- The requirements come from outside: NIS2, ISO 27001, and GDPR all assume formalized joiner, mover, and leaver processes and traceable documentation.
- Manual processes do not scale: when every access request is a ticket, the process becomes slow, error-prone, and impossible to audit.
- The cost grows quietly: IT hours spent on routine requests, employees waiting for access, and audit findings closed by hand.
Four challenges
Does this look like your environment?
These are the same four issues we see in almost every Microsoft environment.
- Onboarding and offboarding are manual: new employees wait for access, leavers keep theirs too long, and the process depends on checklists and individuals.
- Entitlements accumulate: employees change department and role, but the old access follows them.
- Documentation is scattered: the answer to who approved what sits in old emails and closed tickets. Auditors expect it in minutes, not weeks.
- On-premises and cloud are governed separately: AD DS, Entra ID, and the line-of-business systems each have their own console, and nobody has one complete picture.
The solution
The governance layer on top of the foundation
Pointsharp Compliance Suite is a European identity lifecycle management and IGA solution built on Microsoft Dynamics 365 and designed for AD DS and Entra ID. It sits on top of what you already have instead of replacing it.
The division of labor is simple: the HR system is the source, Pointsharp is the engine, and the Microsoft platform is the foundation. When a hire is created in HR, access follows automatically, and it closes the same day the employee leaves.
Three parts, one flow
- The HR system: the source of who is employed, in which department, and with which job title.
- Pointsharp ILM: the engine that translates employment into roles, entitlements, and approvals.
- AD DS and Entra ID: the foundation where access is provisioned and used.
The architecture
What the layer looks like
Governance on top of the foundation, not a parallel system beside it.
The outcome
What the governance layer gives you
Automated lifecycle
Joiner, mover, and leaver processes are driven by HR data. Leavers are closed the same day, without anyone having to remember.
Role model and rule engine
Standard access is granted from department, job title, and location, so most requests never become a ticket.
Self-service that relieves IT
Managers request and approve in FrontDesk, with a full audit trail and no extra Dynamics 365 licenses for end users.
Recertification and audit trail
Fixed recertification dates, approvals by email, and complete history. You are audit-ready all year, not just the week before the visit.
Segregation of duties and GDPR
SoD rules and Article 30 documentation come with the product rather than being built afterwards.
Hybrid by default
AD DS and Entra ID are governed in one model, and M365 licenses, Teams, SharePoint, and shared mailboxes are assigned through roles.
The product choice
Why Pointsharp in a Microsoft environment
| Capability | What it means for you |
|---|---|
| Lives inside the Microsoft platform | Built on Dynamics 365 and Dataverse. Governance ends up in the stack you already invest in and operate, not in a parallel system with its own infrastructure alongside it. |
| Built for hybrid | Deep integration with both AD DS on-premises and Entra ID. M365 licenses, Teams, SharePoint, and shared mailboxes are governed through roles, including during the transition years. |
| European vendor | Positioned for GDPR and NIS2, with a Danish office. 6 million users and 3,500 customer organizations globally. |
| Reaches beyond Microsoft | More than 4,000 connectors covering SAP, Salesforce, ServiceNow, and Oracle among others, plus SCIM and a REST API. Danish HR systems such as SD Løn, Lessor, and Emply are included out of the box. |
| Fast route to value | The standard integrations mean a shorter implementation than a generic IGA platform built from scratch. |
User and customer figures are Pointsharp's own.
The process
How we approach it
Three steps, and after each one you know enough to decide whether to continue.
- No-obligation conversation
We look at your setup and talk about where day-to-day user administration hurts.
- Fit-gap analysis
We map the requirement and compare it with your current Microsoft setup and with Pointsharp. Documented, not estimated by feel.
- Decision basis
You get a recommendation with a business case that management can act on.
If the product choice is still open
Choose first, build afterwards
If you are not sure Pointsharp is the right product, our IGA Ready pre-project is the right way in. It maps the requirement, surveys the market, and delivers a product recommendation with a business case, regardless of which vendor we end up pointing to.
If you have already settled on Microsoft as the platform, IGA Ready Light with a fit-gap against Pointsharp is the fast route to the same decision basis.
Read about IGA ReadyInvestment
- The work is delivered on a time and materials basis, and you get a concrete estimate after the initial conversation.
- The report and the decision basis are yours, whatever you choose afterwards.
Why IAM Group
What you get with us on the job
Danish Pointsharp partner
We are an implementation partner with several Danish customer projects behind us and know both the product and the Danish HR systems.
Analysis before product
We only recommend what the requirement can carry. The fit-gap analysis documents where the value is and where it is not.
Advice, not just project management
We challenge entrenched practice in role and approval structures, so you do not automate a poor setup.
Deliverables in your language
The decision basis and documentation are ready for management, the steering committee, and the auditor without translation work.
Materials
Download the material
Read more about IGA built on your Microsoft environment, brief or in depth.
One-pager: IGA for Microsoft environments
An overview of the solution, the process, and the outcome on one page.
Whitepaper: IGA for Microsoft environments
An in-depth look at how Entra ID becomes the foundation for documented access governance.
Shall we look at your Microsoft environment?
One no-obligation conversation is enough for us to say where the governance layer gives most, and what it will cost.