Monokee is an identity and access management platform that brings login, authentication, identity governance and identity orchestration together in one product. It serves organisations that manage both employees and customers and want to design, change and enforce identity journeys without stitching together separate tools.
Journeys are drawn on a visual canvas, and the same platform runs as SaaS, hybrid or on-premise, which suits European organisations with strict compliance and data residency needs.
At A Glance
| Vendor | Monokee |
|---|---|
| Category | Converged identity platform: access management, MFA, identity governance and orchestration |
| Identities covered | Workforce users and customers |
| Deployment | SaaS, hybrid or on-premise |
| Customers | Gibus |
| Founded | 2017 |
| Market classification | Workforce IAM; also Authorisation |
What Monokee Does
Monokee is built orchestration-first. Rather than separate products for sign-in, authentication and lifecycle management, access management, governance and orchestration share one orchestrator, one set of connectors and the same protocols.
Provisioning, authentication, authorisation and governance are all modelled as journeys, drawn as flows with explicit branches for situations such as an unknown device or an expired credential. Changing how people sign in or get access means editing a flow, not rewriting code. Compliance shapes much of the platform, with dedicated guidance for NIS2, GDPR, eIDAS 2.0 and the EUDI Wallet, PCI DSS and HIPAA.
Products
Visual Identity Orchestrator
The orchestrator is where identity teams build and automate journeys on a drag-and-drop canvas, which shortens IAM projects that would otherwise need custom code. It offers:
- Journey blocks for each lifecycle phase, with branches, loops and nested flows
- Provider nodes for MFA, KYC, antifraud, risk scoring and directory services
- Multi-domain distribution, so one journey can serve several organisations with a shared trunk and local exceptions
- Per-application enforcement, binding flows to specific applications or APIs with risk-based step-up authentication
Access Management
Access Management handles SSO, federation, authorisation and session control, with role-based access control and real-time monitoring. It covers workforce IAM and customer identity (CIAM), including identity administration and fraud detection for customer interactions.
Multi-Factor Authentication And Passwordless
This module helps organisations move away from passwords. It supports knowledge, possession and inherence factors, SMS one-time passwords, biometrics, WebAuthn, FIDO2, passkeys and adaptive factors, and works with Google Authenticator, Microsoft Authenticator and iProov facial recognition.
Identity Governance
Identity governance automates provisioning, joiner-mover-leaver processes, roles and access policies, giving IT and audit teams control over who has access to what.
Decentralised Identity
For organisations preparing for digital identity wallets, Monokee supports W3C verifiable credentials and external wallets, which can be issued, requested and verified inside a journey.
Adaptive Access
Adaptive access applies Continuous Adaptive Trust, evaluating user attributes, device posture, location and reputation signals throughout a session to spot risk and anomalies.
How It Works
All three deployment models run the same orchestrator, connectors and protocols, so customers can switch between them later; “the choice is not a one-way door.”
| Component | What it does |
|---|---|
| SaaS | Monokee runs the platform, with a 99.794% monthly availability commitment. |
| Hybrid | Orchestration runs as a service, with connectors reaching systems that stay on the customer’s network. |
| On-premise | The platform runs in the customer’s own datacentre or private cloud. |
| Protocols | Journeys use SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, LDAP and WebAuthn. |
| Data protection | A GDPR data processing agreement also covers the EU Data Act and includes an annex on assessing US CLOUD Act access risk. |
Identities And Systems Covered
| Workforce users | Employees, through SSO, MFA and governance processes. |
|---|---|
| Customers | Customer identities, with administration and fraud detection. |
| Digital wallet holders | Holders of W3C verifiable credentials and external digital wallets. |
| Applications and APIs | Individual applications and APIs with their own enforcement rules. |
| Directories | Directory services connected as journey nodes. |
Company Background
| Founded | 2017, by identity specialists with more than twenty-five years of experience; the company has grown without outside investment |
|---|---|
| Headquarters | Padova, Italy |
| Offices | Milan, Italy, and Miami, Florida, United States, the latter operated through Pure Identity Corp |
| Leadership | Simone Albamonte, President; Roberto Griggio, CEO; Joseph Miceli, Global CEO; Enrico Fabris, CTO |
| Recognition | Profiled by KuppingerCole (2025) |
Note: This overview is compiled from Monokee’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.