"We support SAML and SCIM" every enterprise software says they support SAML and SCIM. and technically they're not wrong. but then the buyer's IT team actually tries to wire it up and suddenly group mapping doesn't line up with their roles, SCIM deprovisioning silently fails, JIT provisioning keeps creating duplicate users, and IdP-initiated login breaks in ways nobody can explain. that gap between "we support it" and "it actually works in your environment" is where deals die quietly. so i built SSM, basically a typescript app, structured way to run identity go-live work. you intake a customer request, open an engagement, build a test plan from the actual identity features, run through scenarios, collect evidence, record what failed and why, and generate a report the buyer can actually use. customer contacts only see what's meant for them. internal findings stay internal. it runs locally. no cloud infra required. cloudflare tunnel if you want external access.…