Okta Managed Services and Implementation for FMCG Organization​

02 June 2021

The Client

A global leader in the FMCG market space with a presence across 180+ countries with 30,000+ employees.

The Need

The client had made a strategic decision to adopt an enterprise-grade, identity management service for their identity and user management with a secure, reliable, extensively audited platform, which integrates deeply with on-premises applications, directories, and identity management systems. Additionally, the enterprise-grade application features include Provisioning, Single Sign-On (SSO), Active Directory (AD) and LDAP integration, the centralized de-provisioning of users, multifactor authentication (MFA), mobile identity management, and flexible policies for organization security and control.

The Challenge

The client had decided to go ahead with Okta and had a need to eliminate their Azure AD Federations and all the downstream app SSO federations would be required to be migrated to Okta from Azure AD. The client had several AAD tenants managing their 600+ applications and faced a lot of technical challenges and needed to have a quick turnaround solution making Okta the natural choice given the broad OIN.

Additionally, the client was riddled with support for their users across the globe and at the same time migrating to Okta. Star Knowledge proposed to set up a 16×5 managed services/ support work process with a team of Okta-certified admins and consultants to enable the client for a more structured adoption, technical support, and integration of their wide set of applications. Additionally, the client required the team to handle the integrations and onboarding of the new acquisitions that were being made by the organization on a regular basis and required managing the profile master for the acquired company, managing the lifecycle of the users, DSSO, and MFA for all the users as a security layer. Additionally, the client required integration of user lifecycle management for several applications, role-based access setup, self-service policy setup, and setup of group policies and working closely with the organization’s AD teams.

Strategy

The Star Knowledge team of engineers was deployed at the client’s location and had set up a work process to manage the ticketing and helpdesk mechanism to manage the support center. The managed support was focused on migrating the AAD federated applications to Okta while ensuring continuous support and adoption to the organization’s users to have minimal impact.

Over a period of 2 years, 400+ applications were migrated for SSO with Okta and had set up integration for O2O setup for more than 3 business units. Additionally, 25+ applications were integrated with lifecycle management to automate license management from Okta.

The team helped set up and roll out DSSO throughout the organization and integrate with AD making the login experience seamless for most of the office-going employees. Additionally, the team participated in team meetings with global architecture teams and app teams recommending solutions to build a unified experience for the users and help troubleshoot issues closely with the HR teams, Network, and IT teams. For the WFH policy during the outbreak of COVID-19, the Okta team worked closely with the network team to set up the Intune MDM solution and ensure the securing of devices and company data while enabling remote work seamlessly.

Results

• 25% decreased IT cost in year 1 after the implementation of Okta and reduced spend on IT management.
• 100% successful adoption throughout 30,000+ employees globally.
• Increased security and user productivity with integration of LCM and Self-service saving the organization thousands of man-hours lost due to wait/ idle time.
• Unified experience with OKTA integration for SSO experience and security management including MFA and conditional access policies, and network management.
• Single source of truth to manage all Diageo users, applications, and licenses.
• Scalable architecture on OKTA for adding users and applications
• Continuous L3/L4 support for Okta support tickets and application access issues.