Modernising Cloud Identity for a Federal Government Agency
An Australian Government agency modernising its operating environment partnered with Modern 42 to consolidate and modernise its identity systems.
At a glance
- Phased app migration
- Modern authentication
- 4 embedded specialists
The situation
This agency launched a Cyber Security program that included a project to consolidate and modernise its Identity and Access Management systems. It needed a modern IAM solution capable of supporting cloud-based workloads and the transformation of existing digital services.
What we did
- 01
Phase One
Focused on current state review, future state architecture, and an application migration stream to deliver organisational outcomes and reduce cyber risk quickly. Modern 42 consultants worked closely with the agency's technical, architecture, security and cloud project teams.
- 02
Phase Two
Expanded to address the broader strategy and roadmap for identity lifecycle management, while delivering tactical "quick wins" through deployment of solutions to meet known business goals.
- 03
Key Deliverables
IAM Strategy and Roadmap setting the direction for the identity transformation. Overarching architecture, solution design, deployment and security patterns for the Azure AD implementation. Policy and controls guidance ensuring alignment with government security standards. Application migration to cloud, moving applications to Microsoft Azure AD with modern authentication protocols. Authentication handler uplift across various software stacks to support modern protocols.
The outcome
The agency successfully transitioned from legacy, fragmented identity services to a modern, cloud-native IAM capability built on Microsoft Azure AD. The phased approach ensured that high-priority applications were migrated first, delivering security improvements and reduced cyber risk early in the program, while the longer-term identity lifecycle management strategy was developed in parallel.
Key wins
- Delivered a phased transformation that balanced quick wins with long-term strategic outcomes
- Migrated applications to modern authentication protocols, reducing the agency's attack surface
- Provided a team of four specialists embedded with the agency's own teams for seamless delivery
- Established the IAM foundation for the agency's cloud modernisation program