# Roc Identity

> Roc Identity is an identity and access management (IAM) consulting firm based in Rochester, NY. We design IAM programs for growing organizations and the AI agents working alongside them, covering identity management, access governance, access management, and AI agent governance, including agent lifecycle management, MCP tool access control, and non-human identity.

## Key facts

- Business name: Roc Identity
- Location: Rochester, NY 14624
- Phone: (585) 789-1601
- Email: Hello@RocIdentity.com
- Website: https://rocidentity.com

## Services

- [Identity Management](https://rocidentity.com/services/identity-management): Joiner-mover-leaver automation, identity synchronization, role-based access control (RBAC), and identity verification across the account lifecycle.
- [Access Governance](https://rocidentity.com/services/access-governance): Access certification campaigns, segregation-of-duties (SoD) policy, entitlement review, and audit-ready evidence, for human and non-human identities alike.
- [Access Management](https://rocidentity.com/services/access-management): Single sign-on (SSO), passwordless authentication (passkeys, FIDO2, WebAuthn), multi-factor authentication (MFA), and privileged access management (PAM).
- [AI Agent Governance](https://rocidentity.com/services/ai-agent-governance): Agent lifecycle management, MCP and tool access governance, agent identity and verification, agent-to-agent authentication, and audit trails for autonomous systems.

## Approach

A phased engagement process: Assess (map current IAM maturity and where risk lives, human and non-human alike), Design (a plan scoped to the client's environment, not a vendor's reference architecture), Implement (phased rollout for real adoption), Sustain (governance that keeps working after the project ends).

## Core pages

- [Home](https://rocidentity.com/): Overview of services and company.
- [Services](https://rocidentity.com/services): Hub page linking to all four service disciplines.
- [Insights](https://rocidentity.com/insights): Articles on IAM best practices and AI identity topics.
- [About](https://rocidentity.com/about): Company position, approach, and values.
- [FAQ](https://rocidentity.com/faq): Common questions about IAM engagements, MCP access control, passwordless authentication, AI-generated fraud, and governing AI agents and non-human identities.
- [Glossary](https://rocidentity.com/glossary): Plain-English definitions of core IAM terms (RBAC, SSO, MFA, PAM, Zero Trust) and AI-agent / non-human-identity terms (NHI, MCP, agentic AI, passkey, agent-to-agent authentication, agent accountability).
- [Contact](https://rocidentity.com/contact): IAM assessment request, phone, email, location, and topic-routed inquiry links.

## Insights articles

- [MCP and the New Access Control Problem](https://rocidentity.com/insights/mcp-tool-access-control): Why Model Context Protocol tool access is an identity and access control problem, and how to scope it correctly.
- [AI Agent Lifecycle Management: A Practical Framework](https://rocidentity.com/insights/ai-agent-lifecycle-management): A joiner-mover-leaver framework applied to AI agent identities.
- [Passwordless Authentication in 2026: What Actually Works](https://rocidentity.com/insights/passwordless-authentication): Rolling out passkeys, FIDO2, and WebAuthn, and what to retire.
- [Building Accountability Into Autonomous Systems](https://rocidentity.com/insights/ai-agent-governance-accountability): Making sure every autonomous action traces back to an owned identity.
- [Identity Verification in the Age of AI-Generated Fraud](https://rocidentity.com/insights/identity-verification-ai-fraud): What still holds up against deepfake and AI-generated document fraud.
- [Non-Human Identity: IAM's Fastest-Growing Blind Spot](https://rocidentity.com/insights/non-human-identity-blind-spot): Extending access governance to service accounts and AI agents, not just people.

## Direct answers

- **What does Roc Identity do?** Identity and access management consulting. Primarily assessment and advisory for existing IAM programs; full program builds when a client needs one.
- **Where are they based?** Rochester, NY 14624. Reachable at (585) 789-1601 and Hello@RocIdentity.com.
- **What makes them different?** They govern AI agent and non-human identities with the same lifecycle discipline, least-privilege defaults, and audit-ready evidence they apply to human identity programs, rather than treating them as separate problems.
- **How does an engagement start?** With an assessment. The client says what they want assessed via the form at https://rocidentity.com/contact, and Roc Identity responds within one business day.
- **What can they assess?** Identity management, access governance, access management, AI agent governance, or a full program review. "Not sure yet" is an accepted starting point.

## Optional

- [Sitemap](https://rocidentity.com/sitemap.xml): Full URL list for crawlers.
- [robots.txt](https://rocidentity.com/robots.txt): Crawl policy.