Architecture Fit Assessment

Answer five questions about your environment. The result identifies one of four JIT architecture paths, flags whether non-human identity scope needs a second platform alongside it, and points you to the guide most relevant to what's actually driving the initiative.

Question 1 of 5

What does the majority of your access control environment look like today?

Primarily cloud, AWS, Azure, GCP, or cloud SaaS, with little or no on-premises infrastructure

Hybrid, meaningful on-premises infrastructure alongside cloud workloads

Primarily on-premises, legacy servers, databases, and AD-centric infrastructure

Question 2 of 5

Do you have an existing PAM platform deployed and actively used?

No existing PAM, starting fresh

Partial deployment, PAM exists but coverage is limited and adoption is low

Mature deployment, PAM is deeply integrated and used across the environment

Question 3 of 5

Is your identity infrastructure dominated by a single IdP (Okta or Microsoft)?

Yes, Microsoft (Entra/Azure AD) is the single IdP across the environment

Yes, Okta is the primary IdP across the environment

Multi-IdP or no dominant single provider

Question 4 of 5

Is non-human identity (service accounts, pipelines, AI agents) a significant part of the JIT scope?

Yes, NHI credentials are a primary concern; there are many service accounts and pipeline tokens to address

Somewhat, NHI is in scope but secondary to human access

No, JIT scope is human access only

Question 5 of 5

What is the primary driver for this JIT initiative?

Compliance or audit requirement, a specific framework requires JIT controls documentation

Cloud security posture, reduce standing IAM roles and over-privileged access in cloud environments

Breach risk reduction, minimize lateral movement potential from compromised credentials

Developer experience, reduce access friction while maintaining governance

Your Architecture Path

Non-human identity scope flagged.

Given your primary driver:

Export your result. Download a one-page summary of your architecture path, the non-human identity note, and the driver-specific guidance, ready to share with your team. Requires a free subscription.

Just-in-Time Access Software

An independent publication. Built by Machines & Words.