Active Directory, SSO and corporate services

Context

The infrastructure needed centralised identities, permissions and authentication to reduce isolated accounts and improve access experience.

Responsibility

Administration of Active Directory, domain controllers, permissions and identities; SSO integration; and deployment of Grafana and GLPI.

Architecture

Corporate directory as the identity source, services integrated through SSO and permissions defined by role and operational need.

Implementation

Configuration of domain controllers, groups and permissions; progressive service onboarding; and access review.

Challenges

Maintaining compatibility between services, preventing excessive privileges and documenting authentication dependencies.

Outcomes and lessons

More centralised access management and corporate services with a more consistent authentication experience.

Identity is infrastructure: permissions, directory availability and the account lifecycle need to be designed together.