Identity platforms you can test, trust, and change.
Most identity platforms are configured by hand — assembled in a console, undocumented, impossible to reproduce. For the system that controls access to your customers and your staff, that is a fragile place to be.
Idem builds them the way the rest of your software is already built: configuration as code, tested behaviour, and controlled promotion across environments.
Identity as an engineered system
We help organisations assess, build, stabilise, and operate identity platforms — and leave the capability in-house.
A clear, independent view of what is wrong with an existing platform — and what to do about it.
The architecture and migration for Ping, Keycloak, or another enterprise identity platform.
Registration, authentication, MFA, and recovery journeys as tested, version-controlled software.
A platform that has drifted into fragility, brought back under control — without replacing it.
Your team left able to run and extend what we build — the capability stays with you.
Built once. Reproduced every time.
We define the platform once, as version-controlled configuration, then reproduce that single definition — unchanged — from development to production. Every environment is a repeat of the last, so what you test is exactly what you run. No console drift, no undocumented state, no change no one can quite see.
# one definition, promoted unchanged realm: customer-prod journeys: - login-passwordless - step-up-mfa - account-recovery policies: session_ttl: 3600 mfa: required token_binding: enabled promotion: strategy: immutable test_suite: journey-regression
validate
assert
sign-off
live
The person doing the work
Idem is the independent practice of Paul McKeown— former CTO of a specialist identity consultancy, and the engineer who led Ping identity delivery inside two of New Zealand’s major banks.
That combination is rare: deep, hands-on Ping engineering credibility, plus the commercial and architectural judgment to run a high-stakes programme end to end. You work directly with the person doing the work — not a sales team, and not a rotating bench of juniors.
As an authorised delivery partner of Midships Global, Idem brings proven engineering accelerators for PingOne AIC, Ping AIS, and Keycloak — reducing the time, cost, and risk of delivery, from a single accountable provider.
A platform that is fragile, slow to change, or facing a migration you cannot afford to get wrong?
Get in touch. Whether you are a technical leader or not, we speak your language — and you deal directly with the engineer who will do the work.