Enterprise solutions that make your team's tools more efficient

Xertone builds SaaS solutions for in-demand Microsoft toolsets. Our most-requested product, TeamsPIM, brings Microsoft Entra PIM workflows into one place — Microsoft Teams — with your existing security controls preserved.

Start a free trialExplore TeamsPIM →
Built for the Microsoft ecosystem
  • Microsoft Partner
    Cloud Partner Program
  • Entra ID P2 / Governance
    Just-in-time access
  • AppSource Listing
    Coming soon
  • Microsoft Graph Native
    Entra ID + Azure PIM
TeamsPIM — the PIM workflow, in Teams

PIM approvals in email. Activations in the portal. Your team in Teams.

TeamsPIM gives requesters, approvers, and admins one place: approvals land as Adaptive Cards in Microsoft Teams with full justification context, and eligible users request and activate roles from a Teams dashboard — all on your existing Microsoft Entra PIM policies.Microsoft Entra PIM scatters its workflow across surfaces: approval requests arrive by email only — from MSSecurity-noreply@microsoft.com, with a fixed, non-configurable 24-hour approval window — activations live in the Azure portal, and none of it reaches Teams.Source: Microsoft Learn — PIM approval workflow and email notifications, 2026.

Approvals in Teams
TeamsPIM approval card in Microsoft Teams — a new Entra ID request with the requester's justification and Approve and Deny actions
Role dashboard
TeamsPIM dashboard cards showing PIM requests moving through submit, review, and grant steps with a live activation countdown

TeamsPIM in Microsoft Teams — the approval card approvers act on, and the dashboard where eligible users request, track, and activate roles.

Approve without leaving Teams

Today, approving a request means leaving Teams for entra.microsoft.com, signing in, and finding the pending item before the 24-hour window closes. TeamsPIM puts the request and the Approve / Deny action in Teams — the Azure portal stays available whenever you want it.

Notifications where you'll see them

A PIM approval email is easy to miss in a busy inbox. Approvers instead receive an Adaptive Card in Teams with the full request context — role, duration, and justification — visible and actionable on desktop and Teams mobile.

One-click activation, every eligible role

Eligible users see all their roles in one dashboard and activate with a single click — instead of a separate portal round-trip per role. Every request still follows your existing Microsoft Entra PIM policies and is fully audit-logged.

Adaptive Card approvals in TeamsOne-click activation from a dashboardMulti-scope role dashboard

TeamsPIM surfaces PIM activation and approvals in Teams. Role assignment propagation times are determined by Microsoft's platform — they are unchanged by where you initiate the activation.

Explore TeamsPIM →
What we do

A SaaS company focused on the Microsoft ecosystem

Xertone designs and operates SaaS products that live inside Microsoft 365 — built on Azure, authenticated with Microsoft Entra ID, and powered by Microsoft Graph.

Teams-native workflow apps

Software delivered inside Microsoft Teams, where enterprise teams already work. TeamsPIM, our most-requested product, is privileged-access workflows done the Teams-native way.

Identity & access tooling

Practical tools around Microsoft Entra — privileged-access workflows in Teams today, with more solutions on the way.

Microsoft Azure

Built on Microsoft Azure

Operated on Azure infrastructure with Microsoft Entra ID authentication and Microsoft Graph — no third-party identity providers, no bolt-ons.

In-demand Microsoft toolsets we build for

Teams
Copilot
Azure DevOps
SharePoint

Building something in the Microsoft ecosystem? Talk to us →

Security & Data Handling

Enterprise-Grade by Design

Live Data, Not Copies

PIM role and activation data is queried live through Microsoft Graph and is not persisted in Xertone systems. Only temporary Adaptive Card state (auto-expiring) and your subscription configuration are kept on Azure-hosted infrastructure.

Microsoft Entra ID Authentication Only

No external identity providers. No separate logins. TeamsPIM uses your existing Microsoft Entra ID sign-in and admin consent.

Audit-Ready from Day One

Full attribution logging for every TeamsPIM action — who, what, when, and why. Complements Microsoft Entra PIM's native audit trail for compliance reviews.

Read about our security and data-handling practices →

FAQ

Frequently Asked Questions

TeamsPIM is delivered as a Microsoft Teams app (AppSource listing coming soon; guided deployments are available today). The service runs on Xertone's Azure infrastructure, so there is nothing for your team to host — your tenant connects through Microsoft Entra ID admin consent.

PIM role and activation data is queried live through Microsoft Graph and is not persisted in Xertone systems. We cache temporary Adaptive Card state (which auto-expires) and store your subscription configuration. See our Privacy Policy for full details.

TeamsPIM works alongside your existing Microsoft Entra PIM configuration. It doesn't modify your PIM policies — it gives your team one place in Teams to run the same workflows, with the Azure portal still available whenever you want it.

Onboarding is planned to complete within the first week: install the Teams app, grant admin consent, configure your preferences, and onboard your team with our guidance.

With a free trial — one month in your own environment, with deployment support, onboarding, and a success review with our team. Start one through the contact page and we'll set it up around your environment.

TeamsPIM is built by Xertone LLC, a SaaS solutions company based in Plano, TX, focused on software for the Microsoft enterprise ecosystem.

Bring Your PIM Workflow Together

Privileged-access management in Microsoft Teams — where your IT team already works, communicates, and collaborates.

Start a free trialExplore TeamsPIM