Identity and Access Management (IAM)
Control who can access what, with single sign-on, multi-factor authentication, least privilege and privileged access management.
Identity and access management (IAM) is the discipline of verifying who every user, device and service account is, deciding which applications and data they may reach under which conditions, and auditing those rights over time. In short: the right person, the right resource, the right time, the right privilege. Pedante Bilişim, the technology unit of Racoun, delivers IAM under its cyber security brand Racurity, combining the infrastructure of expert solution partners with a single point of contact.
Why identity matters
Most modern attacks do not start with a software flaw but with a compromised account: a phished password, a reused credential or a forgotten account of a former employee. Once inside, attackers try to escalate privileges and move laterally. IAM breaks this chain by making sign-in harder to abuse, narrowing privileges and surfacing unusual behaviour.
What we deliver
- Single sign-on (SSO) with SAML 2.0 and OpenID Connect
- Multi-factor authentication, including phishing-resistant FIDO2 keys and passkeys for administrators
- Conditional access based on role, device health, location and sign-in risk, in line with Zero Trust
- Role-based access and least privilege models
- Privileged access management with vaulting, just-in-time elevation and session recording
- Joiner-mover-leaver automation and periodic access reviews
How we work
We start with an inventory of users, applications and privileged accounts, report the gaps, design policies, test them in report-only mode with a pilot group and then roll out step by step. We work with technologies such as Microsoft Entra ID in Microsoft 365 and Azure environments, as well as hybrid directories. IAM supports KVKK and ISO/IEC 27001 programmes by making access defined, approved and logged. The first meeting is free of charge.
Frequently asked questions
Is SMS-based MFA enough?
It is far better than no MFA, but SMS codes are weaker against SIM swapping and real-time phishing. We recommend app-based number matching for users and phishing-resistant methods such as FIDO2 keys for administrators.
Does IAM make daily work harder?
Done properly, it makes work easier: SSO reduces the number of passwords, and conditional access avoids unnecessary prompts on trusted devices.
Contact
Head office: Ataşehir, Istanbul. We work in person across Istanbul and online with clients all over Türkiye and abroad. Message us on WhatsApp (+90 551 044 08 69) or email ekip@racoun.com.
