What IgniteMatrix does for a company without an IT department
Five working areas, all reading from the directory you already pay for. Nothing to install on laptops beyond the Intune or Google endpoint management you may already use.
Connects to
- Microsoft Entra ID
- Microsoft 365 / Exchange Online
- Microsoft Intune
- Google Workspace
- Slack
- SCIM 2.0
- SAML 2.0 and OIDC sign-in
- REST API and webhooks
Joiners and leavers
Start a run from the dashboard, from an HR email, or through the API. The joiner template creates the account, adds groups, assigns a license and orders the laptop task. The leaver template blocks sign-in at a set time, revokes tokens, converts the mailbox and moves files to the manager.
- Scheduled cut-off at the employee's last working hour, in their time zone
- Steps that need a person (collect the laptop) sit next to automated ones
- Each run keeps a record of who approved what
Starting soon2
-
Sales associate
Laptop ordered Starts Nov 2 -
Bookkeeper (contract)
Starts Nov 9
In progress1
-
Leaver: J. Ortega
Approve 6 of 9 steps
Done2
-
Designer
Complete Oct 26 -
Leaver: warehouse lead
Complete Oct 23
Licenses and spend
IgniteMatrix reads your assigned and purchased SKUs and prices them at list price, or at the price you enter if you buy through a reseller. Seats that have been unassigned for 14 days, and accounts that have not signed in for 30 days, are flagged with their monthly cost.
Default list prices follow the vendors' published annual rates, for example Microsoft 365 Business Basic $7.00, Business Standard $14.00 and Business Premium $22.00 per user per month.
- People
- Licenses
- Devices
Licenses
November
- Monthly
- $1,034
- Idle seats
- $88
- 4 seats
By SKU
| SKU | Seats | Monthly |
|---|---|---|
| Business Premium | 31 | $682.00 |
| Business Standard | 12 | $168.00 |
| Business Basic | 4 | $28.00 |
Device health
For Windows and macOS devices enrolled in Microsoft Intune or Google endpoint management, IgniteMatrix shows disk encryption, OS version and the last check-in. A device that has not checked in for 7 days, or is missing encryption, moves to the top of the list.
Devices needing attention
| Device | Encryption | Last check-in |
|---|---|---|
| LAPTOP-0142 Windows 11 Pro | BitLocker off | 2 hours ago |
| MBA-Design-03 macOS | FileVault on | 9 days ago |
| LAPTOP-0118 Windows 11 Pro | BitLocker on | 1 day ago |
Access reviews and the audit log
Once a quarter, IgniteMatrix sends each manager the list of groups and shared drives their team can reach. They confirm or remove access in one screen. Every change, approval and sign-in to IgniteMatrix is written to the audit log, exportable as CSV for your accountant, insurer or auditor.
- Ops lead Removed 'Finance - Payables' group from contractor account Oct 27, 14:05
- Sales manager Quarterly access review completed for Sales team Oct 24, 11:32
- Owner Write scope Directory.ReadWrite granted Oct 20, 09:01
- Owner Exported audit log, Q3 2026 Oct 02, 16:48
IT requests
Staff send requests to a dedicated email address or the IgniteMatrix Slack app. Each request gets an owner, a category (access, hardware, account, other) and a due time based on your own targets. Access requests can be approved and applied in the same screen.
API and webhooks
Growth and Scale plans include a REST API with JSON responses and token authentication. Start runs from your HR system, pull license spend into a spreadsheet, or receive webhooks when a run finishes.
start-offboarding.sh
curl https://api.ignitematrix.online/v1/offboarding-runs \
-H "Authorization: Bearer $IGNITEMATRIX_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"employee_email": "j.ortega@example.com",
"template": "standard-leaver",
"last_day": "2026-11-06T17:00:00-08:00",
"transfer_files_to": "manager"
}'