Streamlining AD management with enhanced security: Ping's transformation using ADManager Plus

Business challenges

• Automated AD account management: Ping required a seamless way to automate the creation and management of AD accounts, aiming to simplify the onboarding and offboarding processes for both users and computer accounts.
• Security oversight: Given the ever-evolving cyber threats, Ping needed a robust solution to enhance security measures, especially in monitoring and auditing AD accounts.
• Password management: Without a strict password policy in place, there was a rising concern regarding users forgetting passwords, leading to potential inefficiencies and security vulnerabilities.
• Multi-geographical challenges: With users dispersed across multiple countries and time zones, managing AD accounts effectively and ensuring uninterrupted workflow became a priority.
• Reducing manual interventions: Ping aimed to reduce the manual workload on staff by automating processes such as checking for inactive accounts and inactive users.

The Problem

For Ping, the management of Active Directory (AD) accounts was becoming an Achilles' heel in their streamlined operations. The challenges of manual AD management were felt strongly across the organization. Michael Grice, the Systems Support Engineer at Ping, highlighted several pain points. With a distributed workforce spanning multiple countries and time zones, it became evident that traditional methods of AD management were falling short. As operations scaled and new employees from different parts of the world joined the Ping family, the complexity of handling AD accounts increased.

Moreover, a relaxed password policy posed its unique challenges. Without stringent regulations in place, forgotten passwords and user lockouts became a recurring theme. This not only led to potential security vulnerabilities but also increased the workload for the IT support staff who had to regularly address these issues. The combination of manual AD management and the challenges of a global workforce left Grice and his team in search of a solution that was both robust and flexible.

Furthermore, the pressure to ensure that security was not compromised while managing the active and inactive accounts, especially given the sensitive nature of the data they handled, was paramount. Ping recognized the inefficiencies and vulnerabilities of its current system. With a focus on efficiency, security, and scalability, it was clear that a comprehensive AD management solution was urgently required.

The outcome

When ADManager Plus was introduced into Ping's workflow, the transformation was immediately noticeable. This comprehensive solution delivered on its promise of robust automation. For Grice and his team, the days of manual intervention, delayed account provisioning, and security anxieties began to fade.

One of the standout features was the automation capabilities. Grice shared, "Both of those take a lot of the pressure off of the staff... this helps us manage a lot better... all that stuff can be managed through automation." With automated processes in place, managing users from different global locations became significantly less challenging. Not only did this reduce the workload on the staff, but it also introduced a level of consistency and accuracy previously lacking.

Another game-changer was the single-pane view that ADManager Plus offered. Instead of juggling between multiple windows and platforms, everything could now be managed and monitored from a single window. Grice appreciated this, noting the enhancement in efficiency and visibility.

Additionally, the challenges posed by the lax password policy were effectively addressed. With the AD self-service feature, users who forgot their passwords or were locked out could effortlessly reset their passwords. This not only improved user satisfaction but also significantly reduced the number of password-related tickets that the IT support team received.

The onboarding process for ADManager Plus was smooth and hassle-free. Grice expressed satisfaction with the services provided during and after the implementation, stating they were "sufficient to get us up and running." In its entirety, with the integration of ADManager Plus, Ping not only streamlined its AD operations but also fortified its security framework, ensuring a seamless, efficient, and safe environment for its users.

About ADManager Plus

ADManager Plus is an identity governance and administration (IGA) solution that simplifies identity management, ensures security, and improves compliance. With ADManager Plus, manage the user life cycle from provisioning to deprovisioning, run access certification campaigns, orchestrate identity management across enterprise applications, and protect data on your enterprise platforms with regular backups. Use over 200 reports to gain valuable insights into identities and their access rights. Improve the efficiency of your IGA operations with workflows, automations, and role-based access control policies. ADManager Plus' Android and iOS applications help with on-the-go AD and Azure AD management. For more information about ADManager Plus, visit manageengine.com/products/ad-manager/.