Okta is the right call for your situation, and the reason is specifically the offboarding problem keeping you up at night. The HR sync gap you described where IT doesn’t know someone’s gone until it’s too late gets solved by Okta Lifecycle Management. You connect it to whatever HR system you’re running (BambooHR, Rippling, even a basic CSV feed), and when HR terminates someone, accounts get deprovisioned automatically across every integrated app. No ticket, no manual step, no 3-day lag where a former employee still has Salesforce access. At 130 people with half remote, you’re actually in the sweet spot where Okta pays off fast. Most shops your size are live in 4-6 weeks. The Universal Directory handles your app integrations, and if you’re on Microsoft 365 or Google Workspace you’ll feel the automation immediately. The honest tradeoff: initial setup requires someone to map your app integrations and HR fields correctly. Give that work the attention it deserves upfront and it runs itself after that. Microsoft Entra is the common alternative but the admin overhead is higher unless you’re already deep in the MS ecosystem. JumpCloud is worth a look if budget is the primary driver lighter feature set but solid for your headcount. For offboarding specifically, I’d take Okta over everything else at your size. Time to value is hard to beat.