Skip to content
Dependable · Identity & Access Security (MFA, SSO, Privileged Access)

Financial-services company folds an acquired SaaS business into its Microsoft tenant with Vizius as technical lead

A large benefits-administration and financial-services company.

The problem

A large financial-services company acquired a benefits-administration SaaS business and had to fold its whole Microsoft estate, from directory to devices and developer tooling, into the parent environment while the acquired platform kept serving customers daily. The two networks used overlapping IP space, so users moved to the parent domain risked losing reach to applications left behind.

Why it mattered

Two tenants meant duplicate licenses, two identities per person, two security policies, a larger attack surface, and a cutover that could interrupt a customer-facing platform.

What we did

Vizius assessed both environments before planning, then wrote option papers for the hard sub-problems, such as five ways to reach overlapping-IP applications ranked by user impact. When the PMO realized midway it needed a dedicated technical lead, Vizius embedded a principal engineer to separate root causes from symptoms, then took the remaining islands in order: developer tooling, re-addressing and retiring legacy authentication.

What changed

Vizius delivered the environment assessments, migration plans, option analyses, application runbooks and the embedded technical-lead retainer; the relationship grew to six engagements over two years.

  • Financial services
  • Enterprise company
  • NIST CSF
  • CIS Controls

Sound familiar?

  • We just acquired a company and need to bring them into our tenant and domain
  • Our migration vendor handles the mechanics but nobody owns the decisions
  • Both networks use the same private address space
How we did it

Identity & Access Security (MFA, SSO, Privileged Access)

"What could one stolen password reach?"

MFA and SSO everywhere, sign-ins that check the device as well as the user, and privileged accounts locked down, so a stolen password stops being enough.