ACCESSOWL
faster onboarding. Zero seconds to offboard.
How Maxio's 2-person IT team cut a one-hour onboarding ritual to five minutes, made offboarding instant, and dodged a $28K Rippling IT mistake.
B2B payments · Atlanta, GA
240
employees
88
SaaS tools
2
person IT team
A team of 2, 240 employees, 88 apps, and a homegrown Salesforce hack
Last October, Shane Fritts and one teammate ran IT for all of Maxio. They were juggling 88 applications, with admin access to about 120 more, and no HRIS that talked to anything. Every onboarding was a manual ritual: ticket submitted, mirror access from a similar role, deconstruct a homegrown Salesforce record, screenshot for the auditor, ping the owner of the right Slack channel, repeat. A salesperson took 45 minutes to onboard. An engineer with DevOps approvals took longer.
Offboarding was the part that worried Shane. Forty-five minutes to an hour of manual revocation, "and that's not necessarily guaranteed that they're fully offboarded."
"When you're depending on tribal knowledge and experience in a role, you're bound to make mistakes."
Shane Fritts
, Senior Manager, IT at Maxio
Why he started looking for a different way
Shane on what manual offboarding actually looked like at 240 employees, why he'd been hunting for an access management tool for four years, and the budget conversations that kept it on the back burner.
Shane on the four-year hunt
1:12
▾ Read transcript
Shane: I've been checking out access management type tool sets for almost four years. Came close to one previously. It was all about getting budget, right? And trying to present that business case and that return on investment. Especially in the SaaS world, we have to be cost conscious. And IT, like, we're a money sink. There's no real return on investment from IT. It's just, is it working? Yes. Is it not? No. Let's beat up IT.
Lumos, ConductorOne, 1Password SaaS Manager, and the Rippling IT idea
Shane built a spreadsheet. He talked to vendors. He talked to peers who'd consolidated everything into Rippling. Here's what he found.
Lumos
Considered
"It started at, like, twenty-eight for the basics. It was missing a lot of integrations. I think we dodged a bullet, if you want me to be honest with you."
Then Shane heard Lumos was rethinking which identity providers it would support: "They're like, 'Oh, we're kinda shifting away from Google Workspace altogether.' That right there made me feel very concerned for the direction of the company. As an operating model, you should be more open to multiple ends of identity."
Rippling IT
Considered
"Rippling can be good at a lot of things. The IT side has not been a good experience. They wouldn't give us a proof of concept. We had to buy it, which blew my mind. Same with the access controls. We had to buy it to test it."
"They are very cookie cutter. They will only do what is out of the box with whatever SaaS tooling you're on. For Notion, that SCIM bridge only works if you have the enterprise plan. Not cost effective."
1Password SaaS Manager
Considered
"Rippling can be good at a lot of things. The IT side has not been a good experience. They wouldn't give us a proof of concept. We had to buy it, which blew my mind. Same with the access controls. We had to buy it to test it."
ConductorOne
Considered
"ConductorOne had some kinda similar technology to AccessOwl, but they weren't able to provide a really good proof of concept."
"Here's the keys. Go for a drive."
Shane on the AccessOwl proof of concept that closed the deal.
The proof-of-concept moment
0:48
Shane: We met with AccessOwl, and you guys got us into a proof of concept heck and quick, and you didn't bug me. You just said, "Here's the keys. Go for a drive. Let me know how it handles." And I was impressed with just the out-of-box automations.
What it looks like when you can actually clock out on Friday
Now: Shane builds an onboarding template once per role, derived from a person who already does the job. New hire shows up, template applies, done in five minutes. The Zoom license, the GitHub seat, the DevOps approvals: all handled. "Hour to ten minutes if you're not distracted, tops," Shane says. "And that's going slow one-handed while drinking a Dutch Bros."
Offboarding is the bigger unlock. He schedules it the moment the ticket lands. At the chosen hour, AccessOwl pings every tool owner in Slack, every tool with a native integration auto-revokes, and the audit trail writes itself. Shane describes it as a set-it-and-forget-it situation.
"I can call it an early day on a Friday. It's 3 PM, there's nothing going on. 'Guys, clock out. I'll watch our escalation channel, and the offboarding's gonna just kick off when it kicks off.'"
Shane Fritts
, Senior Manager, IT at Maxio
Audits used to mean hours per tool, side-by-side spreadsheets, "find a way to fully export the list and then go and compare spreadsheet to spreadsheet." Now Shane pulls up the live report in AccessOwl, scans for terminated users with access, finalizes the audit. Ten to fifteen minutes.
"Every single app except for two at this company are being managed through AccessOwl. Ain't no one getting in without us knowing."
Shane Fritts
, Senior Manager, IT at Maxio
"Time is money. Money is time."
Shane on what his job would look like today if Maxio had consolidated into Rippling IT instead of
picking AccessOwl.
The Rippling IT counterfactual
1:24
Shane: An offboarding process in AccessOwl is seconds. In Rippling, it's going to be back to almost an hour. That's an hour of my time or my direct report's time that we could be used to solve something else. Time is money. Money is time.
Bonus: Shadow IT discovery
8 people on Loom
at a company that doesn't use Loom.
Before AccessOwl, Maxio had almost no insight into shadow IT. Now Shane gets pings whenever someone signs up for a new tool with their company email. He uses it as a buying signal: "Hey, we have eight people on this, and we've had ten others ask about it in our Slack channel. Is this something we want to look at investing in?" When the chief product officer asked Shane how he knew about a new AI tool an employee had quietly signed up for, Shane told him: "We're always watching. Always."
"Your shadow IT is just unmatched."
Shane Fritts
, Senior Manager, IT at Maxio
When a peer IT lead asked Shane: should I look at AccessOwl?
"Can I use an expletive? Fuck yes."
"On a more professional note: absolutely."
Cut your onboarding by 12×
See what AccessOwl can do for your IT team in a 20-minute demo.
Book a demo →
More customer stories
Motion
2h → 30min onboard
Sary
600+ employees scaled
Drieam
SOC 2 audit-ready