The solution

A two-phased approach with Microsoft Entra

Virtusa designed a two-phased strategy to seamlessly transition users to a more secure environment. This involved migrating workstations from domain-joined to hybrid-joined and, eventually, cloud-only configurations.

Leveraging Microsoft Entra, a cloud-based identity and access management service, Virtusa implemented a comprehensive solution that included:

Seamless user synchronization: All users were synchronized to Entra through Azure AD Connect, creating a centralized identity management system.
Enhanced authentication: Access-controlled servers migrated to Entra ID for multi-factor authentication. Privileged accounts benefitted from password-vaulted access, replacing the previous PingID solution.
Device compliance: Microsoft Intune enforced device compliance standards across all user workstations.
Passwordless workstations: Standard users were empowered with Windows Hello for Business, eliminating passwords as a vulnerability.
Modern authentication: Microsoft Authenticator became the primary authentication method, with phone sign-in options reducing reliance on passwords.
Streamlined onboarding: Temporary access passes facilitated a smoother onboarding process for new hires.
Fortified MFA: FIDO2 security keys, integrated with Windows security, were deployed to strengthen MFA across cloud accounts.
Conditional access policies: Entra ID conditional access policies were implemented to enforce device compliance and stronger authentication for privileged users.

Services

Industries

Insights

Careers

About