Case Study: Unifying Identity and Access Management for a Global Retailer

Introduction

A multinational retailer with a substantial footprint in Asia faced the challenge of managing a complex IT environment with over 110,000 users, numerous SMTP domains, and multiple Office 365 tenants. The organization required a unified identity and authentication solution to streamline operations, enhance security,and improve collaboration across its global workforce. NBConsult was engaged to design and implement a solution that would address these challenges and deliver a seamless user experience.

The Challenge

The retailer’s IT landscape presented several complexities:

• Disparate Identity Management: Multiple Office 365 tenants and SMTP domains resulted in fragmented identity management and authentication processes.
• Global Address List Inconsistency: Managing a consistent global address list across different tenants was a significant challenge.
• Collaboration Inefficiencies: Siloed access to collaboration tools like OneDrive, SharePoint, and Microsoft Teams hindered productivity and information sharing.

The NBConsult Solution

To address these challenges, NBConsult implemented a unified identity and access management solution leveraging Azure Active Directory (Azure AD). Key components of the solution included:

• Azure AD as Identity Foundation: Azure AD was established as the core identity provider, consolidating user identities and authentication across multiple Office 365 tenants.
• Global Address List Management: Entra ID B2B was deployed to create a unified global address list,enabling seamless user discovery and collaboration across the organization.
• Centralized Access Management: Microsoft Identity Manager (MIM) was implemented to manage user identities, groups, and access privileges consistently across different systems and applications.
• Unified Collaboration Platform: OneDrive, SharePoint, and Microsoft Teams were integrated with Azure AD to provide a consistent user experience and enhanced collaboration capabilities.

Implementation and Overcoming Challenges

The project involved several key phases:

• Assessment and Planning: A comprehensive assessment of the existing IT environment was conducted to identify challenges, define requirements, and develop a migration plan.
• Identity Consolidation: User identities were migrated to Azure AD, ensuring data accuracy and consistency.
• Global Address List Implementation: Entra ID B2B was configured to create a unified global address list accessible to all users.
• Access Management Integration: MIM was integrated with Azure AD to manage user provisioning, de-provisioning, and access rights.
• Collaboration Platform Deployment: OneDrive, SharePoint, and Microsoft Teams were deployed and configured to leverage Azure AD for authentication and authorization.

Results and Benefits

The successful implementation of the NBConsult solution delivered significant benefits to the retailer:

• Improved Efficiency and Productivity: A unified identity and access management solution streamlined user provisioning, authentication, and access to resources, enhancing overall efficiency.
• Enhanced Collaboration: The unified global address list and integrated collaboration tools facilitated seamless communication and information sharing across the organization.
• Strengthened Security: Centralized identity management and Azure AD Conditional Access provided enhanced security and protection against unauthorized access.
• Reduced IT Complexity: Consolidation of identity management systems simplified IT operations and reduced management overhead.
• Improved User Experience: A consistent user experience across different applications and locations enhanced user satisfaction.

By partnering with NBConsult, the global retailer achieved a unified and secure identity and access management environment, enabling greater efficiency, collaboration, and security across its global operations.