Skip to main content
Modern 42 specialists collaborating on identity security strategy across advisory, engineering, and managed services
Our Services

Identity security, engineered for outcomes.

Advisory defines your target state. Engineering delivers it. Managed services keep it running. Three connected disciplines, one specialist consultancy.

Advisory & Strategy

Start with clarity,
not a product recommendation.

CEO-led advisory engagements that begin with a rigorous understanding of your current state, business objectives, and constraints. We help you understand where you are, define where you need to be, and build a roadmap grounded in your environment.

01

IAM & PAM Strategy & Roadmap

Pragmatic roadmaps aligned to business objectives and your existing technology investment. No unnecessary licence recommendations.
02

Architecture Advisory

Entra ID, BeyondTrust, and Azure architecture design and technical review for complex, multi-tenant environments.
03

Conditional Access Review

Technical review and gap analysis of your Microsoft Entra Conditional Access framework against current attack patterns.
04

BeyondTrust Assessment

Comprehensive assessment of your BeyondTrust PAM environment, identifying configuration gaps, hardening opportunities, and alignment to best practice.
05

Application Governance Assessment

Assess your workload identities, app registrations, and agentic AI permissions. Quantify over-permissions, map risk, and build governance frameworks for non-human identities.
06

CIAM Migration Readiness Assessment

Fixed-scope assessment covering B2C tenant inventory, migration approach, risk register, and implementation roadmap. A structured entry point for your CIAM migration programme.
Engineering & Delivery

Specialist Engineers
that know the platforms inside out.

From BeyondTrust PAM deployments to complex Entra ID migrations, our engineers are brought in when the standard implementation approach falls short. We bring in the right tools to test, gain observability, and deliver data-driven decisions.

01

Secure Microsoft Entra ID

Conditional Access frameworks, application governance, and continuous monitoring. Strengthen your identity foundation with proven design and deployment expertise.
02

Privileged Access Management

BeyondTrust Password Safe, EPM, and PRA implementations for Australian enterprise. Full onboarding of privileged accounts and assets.
03

MIM Replacement to Entra ID

Migrate from legacy Microsoft Identity Manager to Entra ID Governance and Lifecycle Workflows with minimal disruption.
04

Azure B2C to Entra External ID

CIAM platform migration with JIT password migration and custom policy rebuild for external identity scenarios.
05

Workforce IAM & IGA

Identity lifecycle, access governance, and IGA for the enterprise workforce. HR-driven provisioning, access reviews, and role management.
06

Identity Observability

Deploy and configure Apporetum for continuous visibility across your identity and privilege controls. Available on Azure Marketplace.
07

SSO Application Migration

Consolidate and modernise federation across your application estate. Migrate legacy SSO configurations to Entra ID.
08

Outbound Collaboration

Secure external collaboration through properly governed guest access, B2B direct connect, and cross-tenant access policies.
Managed Services

Your identity platform, managed by the team that understands it.

Ongoing operations, monitoring, and staff augmentation delivered by the same engineers who build and configure these platforms. Not a generic operations centre.

01

Managed PAM

Ongoing operations for your BeyondTrust Password Safe, EPM, and PRA environment. Includes credential rotation oversight, account onboarding, policy management, patching, and health checks.
02

Managed Identity Observability

Continuous monitoring and management of your Apporetum deployment. Dashboard maintenance, alert tuning, anomaly investigation, and monthly posture reports.
03

Staff Augmentation

Embed our IAM and PAM engineers directly into your team. For organisations with an established identity programme that need specialist capacity for specific initiatives.
04

Access Reviews

Automated access reviews and recertification campaigns operated on your behalf, ensuring access remains appropriate and audit-ready.
Coming soon05

Managed IGA

Identity governance operations for organisations using Microsoft Entra ID Governance. Access review management, lifecycle workflow operations, role management, and governance reporting.
Microsoft 365 CSP & Licensing

The right Microsoft 365 licences, from a security partner.

Modern 42 is a Microsoft 365 Cloud Solution Provider. We supply your licences and configure the Entra ID, Defender and Purview security inside them, so you buy the right plan and switch on what you already pay for.

Case Studies

See the work delivered

Comparable engagements we have delivered. Client names are withheld; the work is not.

View all case studies
Federal Government01

Transforming Identity and Cyber Capability for a Federal Government Department

A large Australian Government department partnered with Modern 42 to overhaul its identity infrastructure and strengthen its cyber security posture.

Multi-year partnershipLegacy MIM replacedASD ISM aligned
Financial Services02

Comprehensive Entra Security Review and Ongoing Partnership with a Global Financial Services Group

A global financial services group operating across multiple international markets engaged Modern 42 for an independent security review of its Microsoft Entra environment. What began as a focused assessment has since evolved into a strategic, ongoing partnership.

Entra ID + M365 assessedCA framework deliveredOngoing blended team
Higher Education03

Building a Modern IAM Practice for a Leading Australian University

A leading Australian research university partnered with Modern 42 over multiple years to establish its Identity and Access Management capability from the ground up.

AD FS decommissionedMFA across faculty & studentsBlended team model
How We Like To Work

Our preferred engagement approach

Every organisation is different, but this is the approach we find delivers the best outcomes. We adapt it to your needs, constraints, and pace.

  1. 01

    Discovery & Assessment

    We start by listening. Our consultants map your current identity environment, interview stakeholders, and identify gaps against frameworks like the Essential Eight, NIST, and your internal policies.

  2. 02

    Architecture & Design

    We design a target-state architecture tailored to your organisation, covering IAM, PAM, Entra ID, Conditional Access, lifecycle workflows, and integration with your existing ecosystem.

  3. 03

    Build & Implement

    Our engineers build and configure your identity platform using our proven blueprints and SOPs. We adapt our existing IP to your environment. You don't pay us to reinvent the wheel.

  4. 04

    Test & Validate

    Every deployment undergoes rigorous validation: functional testing, security review, and user acceptance. We verify that policies enforce correctly and access flows work as designed.

  5. 05

    Knowledge Transfer & Uplift

    We train your team to own and evolve the platform independently. Documentation, runbooks, and hands-on workshops ensure you're never dependent on us to run your IAM environment.

  6. 06

    Ongoing Support & Advisory

    Post go-live, we offer flexible support retainers, from break-fix to strategic advisory. As your environment evolves, we help you adapt and continuously improve.

Azure Marketplace

Fixed-cost identity engagements. No surprises.

Not every identity challenge requires a six-month programme. Our Azure Marketplace offerings are scoped, priced, and ready to go. Purchase through your existing Microsoft billing and count it toward your MACC.

  • 01

    Microsoft Identity Observability

    Rapid assessment of your identity ecosystem using Apporetum. Correlate data across HR, AD, Entra ID, and disconnected systems to surface gaps you did not know existed.

  • 02

    MIM Migration to Entra ID

    Structured migration path from Microsoft Identity Manager to cloud-native Entra ID lifecycle workflows, provisioning, and governance.

  • 03

    Conditional Access Framework Review

    In-depth review of your Conditional Access policies to identify gaps, misconfigurations, and opportunities to strengthen your zero-trust posture.

  • 04

    Customer IAM Current State Review

    Assessment of your customer identity environment covering authentication flows, federation, and alignment to current best practice.

  • 05

    Application Migration to Entra ID: 12-Wk Implementation

    Migrate and onboard your SSO-enabled applications to Microsoft Entra ID from your existing identity platform (ADFS, Okta, Ping). Covers discovery, application assessment, prioritisation, and onboarding using OAuth, SAML, or SCIM protocols.

M42 Labs, Security Research Division

Building secure IAM & PAM by day. Testing their boundaries by night.

M42 Labs is where we go beyond the brief. Our security research team hunts for vulnerabilities in the enterprise identity platforms we work with daily and responsibly discloses them to make our clients and the broader community safer. Explore our CVEs, deep-dives, and original research.

Modern 42 security researchers discovering and disclosing identity platform vulnerabilities
FAQ

Common questions about our services

What types of engagements does Modern 42 deliver?
We deliver three types of engagements: advisory (strategy, assessments, architecture reviews), engineering (IAM, PAM, and CIAM implementations, migrations, and platform builds), and managed services (ongoing operations, monitoring, and staff augmentation). Most clients start with an advisory engagement to establish clarity before moving into engineering delivery.
Do you only work with Microsoft and BeyondTrust?
These are the platforms we specialise in because they represent the dominant identity and privilege security stack for Australian enterprise. We occasionally advise on migrations from other platforms (Okta, CyberArk, Ping) to this stack, but we don't implement or support those products directly.
How do engagements typically start?
Usually with a conversation. We'll ask about your current environment, recent pain points, and upcoming pressures such as audits, projects, or incidents. From there we scope an initial engagement, typically starting with an assessment or advisory workshop.
Can you uplift my existing team?
Absolutely. Our goal is not to be ever-present in your business. We believe the best outcome is when your team can own and evolve the platform independently. Knowledge transfer, documentation, runbooks, and hands-on workshops are a standard part of every engagement. We want to leave your organisation stronger than we found it, not create a dependency on us.
Can you work alongside our internal team?
Yes. Most of our engagements are collaborative. We work alongside internal security and IT teams, not instead of them. Whether that means pairing with your engineers during implementation or running workshops to build internal capability, we adapt to how your team operates.
Do you offer managed services or ongoing support?
Yes. We offer managed services for BeyondTrust PAM, Apporetum identity observability, and Access Reviews, as well as staff augmentation for organisations that need specialist capacity. Post-project, we also provide configuration management and architecture review services.
Are you able to work under government panel arrangements?
Yes. We are available through several government procurement vehicles. Contact us to discuss which arrangement suits your organisation.
Do you sell licences or recommend products we don't need?
No. We focus on maximising the value of the systems you already own. If your existing platform can do what you need, we will help you get there without recommending additional licences. We only suggest new tooling when there is a genuine gap that cannot be addressed with your current investment.
Do you bring your own IP to engagements?
Yes. We don't like to reinvent the wheel. Where we have existing intellectual property that caters for your needs, whether that's assessment frameworks, architecture blueprints, or delivery templates, we use it and the price reflects that. We would rather start from a proven foundation than waste time rebuilding the same artefact from scratch.
What industries do you work across?
We work across federal, state, and local government, banking and financial services, healthcare, pharmaceutical, transport and infrastructure, education, and retail. Our engineers hold active security clearances and understand the regulatory and compliance requirements specific to each sector.

Let’s talk about your identity challenges

No pitch decks. No pressure. Just a straightforward conversation about where you are, where you need to be, and how we can help you get there.

  • Understand your current identity posture
  • Identify quick wins and critical gaps
  • Get actionable recommendations, no strings attached

Free 30 min discussion

No commitment required

Book a time that works for you. We’ll come prepared with initial observations about your industry and common identity challenges.

We use cookies

We use cookies and similar technologies to help personalise content, measure the performance of our site, and provide a better experience. By clicking Accept, you consent to the use of all cookies.
Learn more.