Skip to content
Orglume

By Getelis Ltd

← Integrations

Identity & access

Which applications, not just which directory.

The value of an identity provider connection here is the application assignments. That is the list that turns a directory into a genuine picture of who can reach what.

Start with my team

What connects

A read connection to users, groups and application assignments, so the access record reflects the applications people can actually open.

What crosses the boundary

  • Received: users, status and profile attributes you choose to map.
  • Received: group memberships and application assignments.
  • Received: last sign-in where available, used to surface dormant access.
  • Sent back: nothing. Deprovisioning stays in your identity provider.

What this lets you do

  • Populate the access record with real application assignments rather than assumptions.
  • Show dormant access — assigned but not used in months, which is the easiest thing to remove.
  • Compare assignments against the role template and list the exceptions.
  • Include application access on the offboarding plan automatically.

Setting it up

  1. 1Create a read-only API token scoped to users, groups and app assignments.
  2. 2Map identity users to Orglume people; unmatched entries are listed rather than guessed at.
  3. 3Review the exception list — assignments that no role accounts for.
  4. 4Decide the review cadence per application owner.

Permissions

Read-only. Orglume does not request permission to assign or revoke applications, modify users or change policies. Removing access remains an action somebody takes in the identity provider.

What you can ask once this is connected

  • “Who has access to the finance application?”
  • “Which application assignments have not been used in ninety days?”
  • “What would need revoking if this person left on Friday?”

Where it stops

Read-only by design. Orglume reports on assignments and never changes them, which means the offboarding plan tells you what to revoke rather than revoking it. That boundary is deliberate.

Identity & access

Others in this category.

Google WorkspaceAccounts, groups and calendars — the commonest source of truth for who exists.Microsoft 365Entra directory, groups and calendars, on the same read-first basis.Identity platformOur own identity and access layer, for customers already running it.

Run your team with clarity.

From the moment someone joins to the day their responsibilities are handed over, Orglume keeps your people, their work and your organization connected.

Start with my team Set up my company

Set up from a spreadsheet · Nothing about the AI is metered · [email protected]