Four questions about the same afternoon. They are worth asking about your own organisation before asking them about a vendor.
Without an orchestratorWith Monokee
Who can make the change?A developer, in the application that owns the login.Whoever owns the policy, on the canvas, within the limits you set.
How long does it take?A ticket, a sprint, a release window.An afternoon, with the flow visible before it goes live.
Who can read it afterwards?Whoever reads the code — and the auditor takes their word for it.Anyone who can read a diagram. The picture is the configuration.
What happens in six applications?Six implementations, drifting apart one release at a time.One flow, attached where it applies.