Fortis Identity

Employee onboarding and offboarding automation

New hires shouldn't spend their first day waiting for logins, and people who leave shouldn't keep access to your apps for weeks. This package sets up account creation and removal so it happens the same way every time.

$1,600fixed price, about 8 hours at $200/hr

Prices shown are for Series A companies. Pricing for Series B to D and IPO-stage companies may vary and is quoted after a free scoping call.

Who it's for

  • Teams where new hires wait for access and leavers keep it
  • Companies hiring regularly without a dedicated IT person
  • Anyone who has found a former employee's account still active

What's included

  • Automatic account creation for new hires
  • Same-day removal of access when someone leaves
  • Provisioning (SCIM) for supported apps
  • Step-by-step runbook your team can follow

What you'll need

  • Okta, Google Workspace or Microsoft Entra ID as your identity system (the SSO & MFA Starter covers this if you don't have one yet)
  • A list of the apps each role needs
  1. Free 20-min call

    We look at your setup and what you need.

  2. Written scope

    A fixed price and timeline before anything starts.

  3. The work

    Done remotely or onsite, with progress updates.

  4. Handoff

    Runbooks and a walkthrough so your team can run it.

Work is done remotely, or onsite in New York City, Connecticut, Rhode Island and Massachusetts, and anywhere in the US or worldwide. Outside those four areas the client covers airfare, lodging, ground transport and daily expenses at cost. Every package is priced from a $200 hourly rate, and you get the fixed price in writing before anything starts. Listed prices apply to Series A companies; Series B to D and IPO-stage companies may be priced differently.

Questions

What is SCIM?

SCIM is the standard many apps use to let your identity system create, update and deactivate accounts automatically. When someone leaves, their accounts in supported apps are switched off along with their main login.

What about apps that don't support SCIM?

They go on a short checklist in the runbook, so removing access is still a defined step rather than something people remember.

Do we need SSO first?

You need an identity system such as Okta, Google Workspace or Entra ID. If you don't have SSO set up yet, the two packages are usually done together.

Ready to start?

Book a free 20-minute call with the engineer who would do the work, or tell us about your team. You get a written scope and fixed price before any work starts.