partner:co-delivery

Your client. Your lead.
One scope: identity.

For MSPs, insurance brokers, and security & compliance firms whose clients need identity done properly. You lead the engagement and own the relationship; Identity One delivers the identity workstream as your named specialist. We do nothing else in your stack — so there's nothing to compete over.

Talk partnerships See engagement models
partner:rationale

Why partners bring us in.

Identity has become the control plane your clients get audited on — and the hardest capability to hire for.

scope:identity-only

We can't become your competitor

Identity isn't one of our services — it's all of them. No endpoints, no networks, no M365 support, no service desk. Partnering with a generalist invites a rival into your accounts; partnering with a specialist adds one capability with zero overlap.

demand:rising

Your clients are already asking

Cyber insurance questionnaires, Essential Eight uplift, audit findings, board pressure after every breach headline — identity work is landing on your desk whether you can deliver it or not. Certified specialists are expensive to hire and hard to keep utilised.

margin:yours

The economics favour you

You own the client, the paper, and the markup when you lead; you earn a commission on the services engagement when you refer. Either way the relationship — and the recurring revenue attached to it — stays yours.

engagement:models

Three ways to plug us in.

From a simple referral to a standing identity practice behind your firm — you choose how visible we are.

Co-delivery

scope: you-prime, we-deliver
  • You lead and paper the engagement
  • We're named as the identity specialist
  • Okta deployments, governance, assessments
  • Shared accountability, fixed price to you
best forYou want identity on your rate card with a credentialed specialist beside you — not a secret subcontractor behind you.

Referral

scope: introduce-and-earn
  • You make the introduction, we run the engagement
  • Commission on the services we deliver
  • Registered-account protection in writing
  • Zero delivery effort on your side
best forBrokers, auditors, and advisors whose clients need identity fixed — you can't deliver it, and you shouldn't have to.

White-label

scope: by-arrangement
  • Deliverables fully in your branding
  • Your email domain and ticketing where needed
  • L3 escalation & pre-sales on tap
  • Available where the relationship requires it
best forEstablished MSP practices where the client relationship genuinely requires a single brand front-to-back.
licensing:referral-share

Commissions on the work, not just the licences.

Partner commissions are based on the services engagement — where the real value is — with licensing handled by us and shared where the margin genuinely exists.

you:refer

You make the introduction

A client needs Okta — new deployment, expansion, or a renewal they're dreading. You bring us in, under your brand or ours, whichever fits the relationship.

we:license

We run the licensing honestly

Right-sizing against actual need, suite-versus-add-on maths, and deal registration with Okta to secure partner pricing. Where a deal is discounted to the floor, we say so — we don't make our money on licences, we make it making them work.

you:earn

You earn where the value is

Commission on the services engagement your introduction created, plus a share of realised licensing margin on resells and renewals — all percentages, timing, and protections set out in the partner agreement before any deal is done.

handshake:sequence

How the partnership runs.

Low ceremony to start, tight process once we're delivering.

01

Align

A call to map your client base, stack, and where identity fits your offering.

02

Agree

Subcontract terms, rates, and non-solicitation — in writing, before any client work.

03

Pilot

One engagement, tightly scoped, so you can judge the work before you scale it.

04

Scale

A standing arrangement: your identity practice, our delivery, shared playbooks.

partner:assurances

The things you'd want in writing.

The questions every partner asks before working with us — answered upfront.

client_ownershipWe never market to or approach your clients. If one of your clients contacts us directly, you hear about it from us first — and our default is to run the work back through the partnership, with your commission intact.
account_protectionAccounts you register with us are protected for a defined window in the partner agreement — a mechanism you can hold us to, not a handshake.
scopeIdentity only. We don't do endpoints, networks, M365 support, backup, or service desk — structurally, there is no business of yours we could take.
engagement_paperIn co-delivery, the engagement runs on your letterhead and your SOW with Identity One named as the identity specialist. Full white-label is available by arrangement where the relationship requires it.
credentialsOkta Certified Professional and Administrator, and a registered Okta Partner Network reseller. Enterprise-scale IAM background across Okta and SailPoint — certified depth plus transacting capability.
securityLeast-privilege admin access to client tenants, MFA on everything, and access revoked at engagement end — we practise what we deploy.
referral_termsCommission percentages, payment timing, and what happens if a client churns — all agreed in writing upfront. No handshake deals, no surprises at renewal.
localeSydney-based, Australian entity (Crossover IT Pty Ltd), working your clients' hours — no offshore handoff, no timezone lag.
partner:request

Add an identity practice without hiring one.

A 30-minute call is enough to work out whether there's a fit — bring a live opportunity if you have one and we'll help you scope it on the spot.

Talk partnerships
© 2026 Crossover IT Pty Ltd, trading as Identity One · Sydney, Australia · Independent consultancy — not affiliated with Okta, Inc.