About Services Passwordless Approach Expertise Engage Us
Identity & Access Management · Netherlands

Securing
Digital
Identities.

SRA Holding is a Netherlands-based senior IAM consultancy with 23+ years of enterprise expertise — delivering identity governance, privileged access, passwordless authentication, and AI-powered IAM for the world's most demanding organisations.

Explore Services Start a Conversation
SRA Holding IAM Architecture
23+
Years Experience
7
Certifications
EU
Based · NL
100%
Senior Delivery
CISSPTOGAFSABSA CISAAZ-500AWS SAArchiMate
SailPoint IdentityIQ CyberArk PAM FIDO2 · Passwordless Okta Identity Zero Trust PKI · Code Signing AI-Powered IAM NHI Governance SailPoint IdentityIQ CyberArk PAM FIDO2 · Passwordless Okta Identity Zero Trust PKI · Code Signing AI-Powered IAM NHI Governance
About SRA Holding

Where Security Meets Strategy

SRA Holding is a Netherlands-based IAM consultancy with over 23 years of hands-on enterprise experience. We specialise in designing and implementing identity security programs that protect the world's most complex organisations — from semiconductor firms to global financial institutions.

We work at the intersection of enterprise architecture and engineering — translating regulatory requirements and board-level objectives into practical, scalable, and measurable IAM outcomes.

Our practice spans IGA, PAM, PKI, federation, passwordless, non-human identity, and AI-augmented IAM — all delivered by a single senior architect from inception through go-live.

"We don't just advise — we build, configure, and deliver. Senior-level expertise at every stage of your engagement."
🏛️

Enterprise Architecture

TOGAF, SABSA, and ArchiMate applied to IAM strategy, roadmap design, and governance across regulated industries.

🤖

AI-Augmented IAM

Pioneering AI-powered identity workflows using Mistral AI and agentic architectures for intelligent, automated identity decisions at scale.

🔑

Passwordless & FIDO2

Patent-submitted innovation and proven large-scale delivery — eliminating passwords from the most security-critical enterprises in Europe.

🇳🇱

Netherlands Based · EU Focused

KvK-registered holding company. On-site available across the EU. Deep knowledge of Dutch and European compliance landscapes.

What We Do

Services & Solutions

From identity strategy to hands-on implementation — we cover the full spectrum of enterprise IAM. Each engagement is tailored, senior-led, and outcome-driven.

01

Identity Governance & Administration

Design and implement comprehensive IGA programs — joiner-mover-leaver lifecycle, access certification, RBAC/ABAC, role mining, and audit-ready reporting.

SailPoint IIQLifecycle MgmtAccess ReviewsRBAC/ABAC
02

Privileged Access Management

Secure, govern, and audit privileged accounts and secrets across on-prem, cloud, and hybrid environments. Reduce your attack surface at the root.

CyberArkConjurSecrets MgmtZero Trust
03

Passwordless & FIDO2

End-to-end passwordless delivery — from FIDO2 architecture through global enterprise rollout. Patent-submitted innovation in physical access integration.

FIDO2WebAuthnYubiKeyPatent Submitted
04

Federation, SSO & MFA

Architect and deploy enterprise federation and single sign-on solutions balancing security with a frictionless user experience across all platforms.

OktaSAML/OIDCMFAAzure AD
05

PKI & Code Signing

Design and deliver enterprise PKI infrastructure and centralised code signing services securing your software supply chain and regulatory compliance.

KeyfactorPKI DesignCode SigningCCSS
06

IAM Strategy & Roadmap

Multi-year digital identity roadmaps aligned to business objectives, compliance mandates, and Zero Trust principles using proven enterprise architecture frameworks.

TOGAFSABSAZero TrustVADA
🤖

AI-Powered IAM — Now Available

Integrating large language models and agentic workflows into IAM platforms — enabling intelligent access decisions, automated reviews, and conversational identity management at enterprise scale.

Learn More
Signature Capability

Passwordless & FIDO2

Eliminating passwords from the enterprise is no longer aspirational — it is an architectural imperative. SRA Holding brings patent-submitted innovation and proven large-scale delivery to every passwordless engagement.

⚗️
Patent Submitted

FIDO2 for Physical Access Control — A Novel Architecture

SRA Holding's principal architect has submitted a patent for an innovative extension of the FIDO2 / WebAuthn standard into the domain of physical access control — enabling hardware security keys and biometric authenticators to govern not just digital systems, but physical entry points: secure facilities, data centres, server rooms, and controlled operational zones.

This architecture bridges the historically siloed worlds of logical and physical identity into a single, cryptographically secured, passwordless framework — eliminating the security gaps of maintaining two separate access control ecosystems.

FIDO2 / WebAuthnPhysical AccessHardware Security KeysBiometric AuthUnified Logical + Physical IAM Patent Submitted ©
Case StudyConfidential · Netherlands · Global Financial Institution

Passwordless at Scale — Leading Dutch Global Bank

Full end-to-end delivery of a passwordless authentication program for one of the Netherlands' largest financial institutions — a globally operating bank with tens of thousands of employees, strict DNB and ECB oversight, and a zero-tolerance posture on credential-based breaches. Delivered from inception through design, implementation, and global rollout by a single senior architect.

01

Discovery & Risk Assessment

Mapped the bank's entire authentication landscape. Identified 340+ critical systems relying solely on passwords. Quantified breach risk under PSD2, DORA, and NIS2 for board-level buy-in.

PSD2DORANIS2Risk Modelling
02

Architecture & Standards Design

Designed FIDO2/WebAuthn architecture aligned to NIST SP 800-63B AAL3. Defined authenticator assurance levels per role. Presented full ArchiMate documentation to CISO, CTO, and DNB auditors.

FIDO2/WebAuthnNIST AAL3ArchiMateDNB Regulatory
03

Proof of Concept & Pilot

Structured PoC across retail banking, corporate treasury, and IT operations. Validated FIDO2 across 47 applications including SAP and mainframe. 99.2% authentication success rate before full rollout.

YubiKeyOkta PasswordlessSAP Integration
04

Global Enterprise Rollout

Phased deployment across Netherlands, UK, Germany, and Asia-Pacific. Token logistics, identity provisioning, and end-user communication in 6 languages. Zero-downtime migration with full regulatory audit trail.

Global DeploymentChange ManagementZero Downtime6 Languages
✓

Outcome & Impact

100%
Password Elimination
Target Systems
340+
Applications
Migrated
0
Credential Incidents
Post Go-Live
DNB
Regulatory Audit
Passed

The bank now operates one of the most advanced passwordless identity environments in European financial services — fully aligned to DORA, PSD2, and DNB guidelines.

Ready to eliminate passwords from your organisation?

Whether you're a regulated financial institution, global enterprise, or technology company — our FIDO2 practice delivers from strategy through production rollout.

Start the Conversation
How We Work

Our Engagement Methodology

01

Discover & Assess

Deep-dive into your identity landscape — mapping gaps, risks, compliance obligations, and stakeholder requirements to establish a clear baseline.

02

Architect & Design

Develop a target-state architecture and implementation blueprint aligned to your business context, technology stack, and risk appetite.

03

Implement & Integrate

Hands-on delivery — configuring, integrating, testing, and hardening IAM solutions in your environment with full documentation.

04

Operate & Optimise

Knowledge transfer, runbooks, and ongoing advisory to embed IAM maturity and adapt to evolving threats and regulations.

Technology Stack

Platforms We Master

SailPoint IdentityIQ 8.3
CyberArk PAM
Okta Workforce Identity
Keyfactor SignServer
FIDO2 / WebAuthn / YubiKey
MuleSoft API Platform
ServiceNow ITSM
Microsoft Azure AD / Entra
SAP BTP / XSUAA
Conjur Secrets Manager
SPIFFE / SPIRE
AWS IAM / Cognito
Mistral AI — IAM Agents
Azure Bot Framework
Active Directory / LDAP
Rancher / Docker / K8s
Get In Touch

Let's Solve Your Identity Challenge

Whether you're launching an IAM programme, facing a specific security gap, or need senior advisory for a critical project — reach out and we'll respond within one business day.

Emailinfo@sraholding.nl
LocationAalsmeer, North Holland
Netherlands
KvK96222174
EntitySRA Holding BV
ScopeOn-site NL & Remote EU
Aalsmeer, Netherlands · 20km from Amsterdam
We respond within 1 business day