Regional public administration: Zero Trust IAM for a shared Microsoft platform

Context

A regional government launched a program to roll out a shared HR, finance and social services suite (Dynamics 365 Finance & Operations) to all its local authorities and social welfare centres, on centralized regional infrastructure.

FuturWork deployed a senior IAM expert to secure the Microsoft ecosystem: Entra ID and D365 F&O.

Challenges

• Sensitive public data. HR, payroll and social data under strict GDPR rules, on shared infrastructure.
• Complex IAM governance. Many different authorities, privilege sprawl and inconsistent role models.
• A demanding Microsoft security stack. MFA, PIM and Conditional Access to align with ISO and NIST.

What we did

• Zero Trust identity framework. RBAC, Conditional Access, MFA and PIM to reduce the attack surface.
• D365 F&O governance. Segregation of duties, access reviews and audit trails.
• Security by design. ISO 27001, NIST and GDPR controls, Defender for Cloud and proactive monitoring.

Results

• 19 local authorities on one secured identity model
• Zero Trust architecture in production
• Audit-ready access governance on D365 F&O

Technologies

Microsoft Entra ID · Dynamics 365 F&O · Defender for Cloud · MFA · PIM · Conditional Access

Securing citizen services through Zero Trust IAM.

Facing a similar challenge? Talk to our team.