Case Study Short Description
A company partnered with Tekrosta Cloud to implement a centralized Active Directory solution on AWS EC2, enabling secure Single Sign-On (SSO) across HRMS (Azure), Oracle Fusion (OCI), LMS, and GoCollect (AWS).
Problem Statement / Definition
The company required a centralized Identity and Access Management platform for more than 2,000 users across AWS, Azure, and OCI. The solution centralized authentication, strengthened security, simplified user management, and improved governance.
Proposed Solution & Architecture
- Amazon EC2 for Active Directory Domain Services
- Amazon VPC, Subnets, Security Groups
- Reverse Proxy Server
- Organizational Units and Group Policies
- SAML 2.0, OAuth 2.0, OpenID Connect
- Integration with HRMS, Oracle Fusion, LMS and GoCollect
- Amazon CloudWatch, CloudTrail, AWS Config and GuardDuty
Outcomes of Project & Success Metrics
- Centralized identity management
- Single Sign-On across applications
- Improved security and compliance
- Reduced manual administration
- Better user experience
- Centralized audit logs
- Scalable AWS infrastructure
Lessons Learned
- Proper AD planning simplified administration.
- Early federation testing reduced integration issues.
- AWS native security services improved governance.
- Role-based access enhanced security.
- Cross-cloud identity improved operational efficiency.