Case Studies

True tales of customer success with Sentinel

At Sentinel, we build technology solutions to solve business needs. Maximize a customer's investment in technology, while building secure paths for the future. Resolve business issues to build competitive advantages. Learn more about how Sentinel projects yield positive results!

City Government Agency Enacts Active Directory Migration


Environment

The customer’s complex IT infrastructure included identity services featuring legacy Active Directory Federation Services (AD FS) protected by the Barracuda Web Application Firewall (WAF). Cisco Duo was also in place for multi-factor authentication, as their facilities required secure access management. These were in place to satisfy stringent regulatory compliance in support of critical operational technology systems for water treatment and distribution. 

Challenge

The customer initiated a strategic identity modernization project aimed at enhancing security controls. The primary challenge stemmed from their limited resources and lack of experience with Microsoft Entra ID as a modern authentication identity provider. Creating further complications was the customer’s requirement that their treatment and distribution operations remain uninterrupted throughout this migration, even as legacy hardware and software was retired. The Sentinel Consulting team initially conducted a Modern Identity Workshop to tackle these issues, addressing lifecycle, access, entitlement, and threat management practices. This engagement helped define the project requirements, ensuring alignment with industry-best practices and regulatory compliance.

Solution

The implemented solution focused on a comprehensive identity modernization strategy, beginning with deploying Microsoft Entra ID as the primary identity provider. This included careful Cisco Duo tenant synchronization configuration and custom conditional access policies. The solution featured modern MFA (multi-factor authentication) and SSPR (self-service password reset) capabilities, supported by targeted registration campaigns for user adoption. A staged migration approach allowed for pilot testing, while comprehensive assessment of security controls ensured robust protection. Knowledge transfer sessions equipped the customer’s team with necessary operational capabilities. 

Results

The modernization project delivered notable improvements to the customer's identity infrastructure. By integrating modern authentication methods, security was enhanced, and operational complexity decreased with the retirement of outdated systems. Users benefited from improved self-service capabilities and streamlined identity management processes. The migration was executed without service interruptions, ensuring the continuity of critical utility operations. Comprehensive security controls and detailed recommendations provided a roadmap for ongoing enhancements, strengthening compliance and scalability. This positioned the organization favorably for future growth, improving operational efficiency and risk mitigation for their identity services.