StackBob connects an organisation’s identity stack to the applications it cannot normally reach: tools without SCIM, APIs or ready-made connectors. It is for IT and security teams that still create and remove accounts in those applications by hand, and for identity governance programmes that need coverage beyond the apps their main platform supports.
Smaller companies use it as their main access tool, while larger ones use it to extend an existing identity governance platform to the long tail of applications.
At A Glance
| Vendor | StackBob (Stackoon Corp.) |
|---|---|
| Category | Workforce IAM, identity connectivity and governance for non-SCIM applications |
| Identities covered | Employees and contractors, shared accounts, orphaned accounts |
| Deployment | SaaS hosted in isolated AWS VPCs, with a browser extension |
| Customers | Roosh Investment Group, 42DM, Brights, Medipyxes, Chassy |
| Certifications | SOC 2 |
| Market classification | Workforce IAM |
What StackBob Does
Many business applications sit outside the identity stack because they offer no SCIM, API or connector. Access to them is granted by email and spreadsheet, and nobody is sure it is removed when people leave. StackBob closes that gap: it discovers the applications a team uses, maps who has access to what, and automates access changes from a new hire’s first day through role changes to exit. Existing IGA platforms can hand work to StackBob for the applications they cannot reach.
Products
Identity Connectivity Solution
The core product finds and connects web apps, cloud systems and tools that have no SCIM API, with or without SAML SSO. Application discovery surfaces orphaned accounts and unused seats, and a single view of who has access to what gives audit teams one place to look. Agent Bob, StackBob’s AI agent, keeps that map of access current in real time.
Automated Onboarding And Offboarding
This add-on removes the manual steps from joiners, movers and leavers. RBAC policies assign permissions by role, department or project, and all access is revoked as soon as someone leaves or changes role, which closes the window in which a former employee can still sign in.
Enterprise Password Management
Teams that share common accounts can keep those logins in encrypted vaults instead of chat messages. Users sign in to the vault with Google or Microsoft SSO and a personal 6-digit PIN, logins can be shared with external vendors or contractors without revealing the password, and credentials can be imported from another password manager.
User Access Review
User access review produces the evidence SOC 2 and ISO 27001 auditors ask for. It captures every access change across the stack and keeps each request, approval and permission change with who asked, who approved and why, as structured logs.
Spend Optimisation
Spend optimisation helps finance and IT teams cut software costs by finding unused licences and orphaned accounts. StackBob reports that finance teams win back 25% of software costs this way.
How It Works
StackBob is a hosted service with a web application and a browser extension.
| Component | What it does |
|---|---|
| IGA extension layer | StackBob sits between an upstream IGA platform and the target applications. Bob Agents pick up provisioning requests from the IGA platform as a normal connector would, each application gets its own connector, and connectors are bidirectional, pushing access and pulling status back. Upstream platforms supported include SailPoint, Ping Identity and Saviynt, and users sign in through Okta, Microsoft Entra ID or Google Workspace, with a native reconciliation flow for Entra ID. |
| Browser extension | The extension records only that a tool was accessed on a given day, with no screen recordings or content capture. |
| Hosting | Isolated AWS VPCs and perimeter firewalls separate each workload, and each customer’s data is kept apart from all others. |
| Encryption | AES-256 protects data at rest and in transit. |
| Language model | StackBob uses a self-hosted LLM, and customer data is never shared with third-party LLM providers or used to improve results for others. |
| Sessions | Idle sessions expire automatically, sensitive data is not kept in local or session storage. |
Identities And Systems Covered
| Human users | Employees and contractors, from onboarding through role change to offboarding. |
|---|---|
| Shared accounts | Common team accounts whose passwords are held in encrypted vaults. |
| Orphaned accounts | Accounts and unused seats found during application discovery. |
| Applications | Web apps, cloud systems and tools without SCIM APIs, and apps with SAML SSO, including Slack, Zoom, Airtable, Jira, Salesforce, Shopify, Google Ads, Google Analytics, Google Tag Manager, GitHub, AWS and Azure. |
Company Background
| Founded | 2022. |
|---|---|
| Leadership | Nick Hunt (co-founder and CEO) and Yarik Rozum (co-founder and CTO). |
| Headquarters | Detroit, Michigan, United States. |
Note: This overview is compiled from StackBob’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.