Microsoft 365 and Entra ID
Tenant configuration as it actually runs — not the slide from the last license deal.
Microsoft Identity Readiness
We fix identity so cloud and security actually hold.
A two-week, fixed-price review of Microsoft 365 and Entra ID. MFA, privileged roles, inactive accounts, access controls. Written findings and a sequenced remediation plan. Fully remote from Amman.
What we look at
The controls that decide whether the rest of the stack is real.
MFA and authentication
Who is covered, who is excepted, and which exceptions have no owner.
Privileged roles
Standing admin, unused Global Administrator, and PIM where it exists but is not used.
Inactive and guest accounts
Stale identities still trusted. The usual overnight and audit problem.
Access controls
Conditional Access gaps, legacy auth, and apps that still bypass the policy you think you have.
Written plan
Findings ranked by risk and effort. What to fix this month vs. what to schedule.
How it runs
Two weeks. Remote. One readout.
- Week 1 — tenant access, evidence, interviews with whoever owns Entra
- Week 2 — findings, ranked plan, readout call
- You keep the written report. No obligatory follow-on project
- If a partner won the deal and cannot staff identity, this is the first slice
Price
$1,500–$3,000
Indicative. 50% before we start, 50% on the written report. Jordan and GCC invoices can be in JOD at the same band (about 1,500–4,000 JOD).
This is an assessment, not a SOC, not a pentest, and not a six-practice pitch.
Next step
Twenty minutes this week is enough to see if it fits.
Who owns Entra. What broke last. Then a date for the two-week review, or a no.
- hello@technavity.com