Restack Technology designs, migrates and manages identity platforms for Australian organisations of all sizes, with a particular focus on the mid-market. We work across Okta, Microsoft Entra ID and JumpCloud, and help businesses consolidate identity providers, retire on-premises Active Directory, roll out passwordless sign-in, automate joiner, mover and leaver processes, and bring privileged access under control.
Most of our identity work starts with a business that has grown into more than one way of managing people's access, often with Microsoft 365 on one side and a separate identity provider or legacy directory on the other. We help decide where identity should live, move applications across in planned waves, and then run the platform day to day if that suits the team.
Okta and Entra ID both in use, with licensing paid twice and policies that drift apart over time.
Servers kept alive for a handful of legacy dependencies, with the risk and cost that comes with them.
MFA in place but inconsistent, with phishable methods and exceptions that have built up over the years.
Accounts created by hand, access removed late or not at all, and no reliable record of who has what.
Shared admin credentials, standing access and service accounts with passwords that never change.
ISO 27001, SOC 2, the Essential Eight or a parent company standard asking for evidence of access control that is hard to produce today.
Each of these can be engaged on its own, or combined as part of a larger identity programme. Open any card for more detail.
We map what still depends on on-premises Active Directory, move users, groups and devices to a cloud identity platform, and retire domain controllers once nothing relies on them.
One sign-in across SaaS and internal applications using SAML, OIDC and WS-Federation, with SCIM provisioning wherever the application supports it. We also handle consolidation from one identity provider to another.
Phishing-resistant sign-in using Windows Hello for Business, passkeys, FIDO2 security keys and platform authenticators, with push-based MFA as a fallback. We plan the rollout so it feels like an improvement to staff.
Access policies based on user, device health, location and risk, designed as a coherent set with clear exceptions and break-glass accounts, and tested before they are enforced.
Joiner, mover and leaver processes driven from HR or a single source of truth, so access is granted on day one and removed promptly when people leave.
Scheduled reviews of who has access to what, with evidence that holds up in an audit. Useful for ISO 27001, SOC 2 and customer security questionnaires.
Vaulting, rotation and session control for admin and service accounts, across both corporate IT and operational technology where needed. We work with Idira (formerly CyberArk), Silverfort and CrowdStrike Falcon Identity Protection.
Restack delivers CrowdStrike's Modern Identity Risk Review directly: a free, fixed-scope assessment that gives a clear picture of identity and SaaS risk in three weeks. It suits organisations that want to know where they stand before committing to a larger identity project, or that need evidence for a board, auditor or insurer.
Using your existing Falcon tenant, or a Restack-provided one if you don't have one, we deploy the CrowdStrike Falcon sensor to domain controllers and connect Falcon Next-Gen Identity Security to your identity providers and SaaS applications, with read-only access wherever possible.
The platform builds a picture of identities, access and configuration, which our consultants review and validate against your environment.
We walk through the findings with your team and leave a prioritised report, ranked by risk and effort to fix.
Because Restack delivers the review directly, the findings come from the same Australian team that can help fix them, whether that is tightening Conditional Access, cleaning up privileged accounts or planning a move off Active Directory.
We work across the main identity platforms, so the recommendation can follow what suits the business.
Often the best fit when Microsoft 365 is the centre of the business and Intune manages devices, so one Microsoft identity layer keeps licensing and policy in one place.
Often the best fit when there is a broad SaaS estate beyond Microsoft, complex application integrations, or a need to stay neutral across productivity suites.
Often the best fit for a mixed macOS, Windows and Linux fleet where identity and device management are wanted in one platform, often in smaller or fast-growing teams.
Useful when lifecycle and SaaS user management need to reach further than the identity provider alone can.
For privileged access, identity threat detection, or protecting legacy systems that can't take modern MFA directly. Idira was formerly CyberArk.
Most identity work follows the same three stages, and a customer can start at whichever one fits.
A review of the current identity setup, applications, MFA coverage and privileged accounts, ending in a recommended target platform and a staged roadmap.
Design, build and migration, with applications moved across in planned waves, each with its own runbook and rollback plan, and staff communications prepared alongside.
Ongoing administration of the identity platform, policy tuning, access reviews and lifecycle automation, run alongside the internal team.
Consolidated onto one identity provider on Microsoft Entra ID, with passwordless biometric sign-in for around 300 users, in under three months.
Read the storyOne privileged access platform across corporate IT and OT on Idira (formerly CyberArk) Privilege Cloud, aligned to the global group standard.
Read the storyIdentity and device management consolidated on JumpCloud with SSO and a hardened SOE, as part of an uplift toward ISO 27001 and the Essential Eight.
Read the storyIt depends mostly on how central Microsoft 365 is to the business. Organisations built around Microsoft 365 and Intune often consolidate on Entra ID to simplify licensing and policy, while those with a broad non-Microsoft SaaS estate or complex integrations often stay with Okta. We work with both, so we can recommend either.
For a mid-market organisation of a few hundred users, three months is a realistic timeframe for moving between identity providers such as Okta, Microsoft Entra ID and JumpCloud. Our statutory fund migration for around 300 users was completed in under three months, with applications moved in planned waves.
In many cases, yes. The work is mostly in finding what still depends on it, such as file servers, legacy applications, printers and network authentication, and moving each to a cloud equivalent before the domain controllers are switched off.
For most people it means signing in with a fingerprint, face or PIN on their own device using Windows Hello for Business or a passkey, with an authenticator app as a fallback. It is generally faster for staff and much harder to phish.
Yes. Restack can run the identity platform day to day, including policy changes, lifecycle automation and access reviews, working alongside the internal IT team.
Strong MFA, timely removal of access and control of privileged accounts are core requirements of all three. Identity work usually produces much of the evidence auditors ask for, particularly when access reviews and lifecycle automation are in place.
A Modern Identity Risk Review is a free, three-week assessment of how accounts, privileges and SaaS access could be misused by an attacker. Restack runs these using CrowdStrike Falcon Next-Gen Identity Security, then walks through the findings and a prioritised remediation plan with your team.
Related capabilities: Endpoint, Security, SaaS operations, Intelligent automation and all capabilities.
Whether you are weighing up Okta and Entra ID, planning to retire Active Directory or preparing for an audit, a short conversation is usually the quickest way to work out the next step.
