Simplifying Identity Management by Replacing a Complex Platform in an NHS Trust
Reducing cost and complexity while improving usability, security, and speed of change across Active Directory and Microsoft 365.
Healthcare sector (NHS). Client details have been anonymised, but the scenario reflects a real engagement.
Snapshot
- Industry: Healthcare (NHS)
- Organisation size: Approximately 6,000 users
- Environment: Active Directory and Microsoft 365
- Challenge: Overly complex and costly identity management platform
- Solution: Transition to a simpler, more flexible platform using Adaxes
- Outcome: Reduced costs, faster change cycles, and improved usability and security
The Situation
The organisation was using an enterprise identity management platform that, while capable, had become overly complex and expensive for its needs.
Making even small changes often required external professional services, resulting in long turnaround times and increased cost. The platform delivered more capability than required, introducing unnecessary overhead for the IT team.
The Challenge
- High cost of maintaining the existing platform
- Over-engineered solution relative to actual requirements
- Reliance on external professional services for routine changes
- Slow turnaround for implementing updates
- Complex interface for service desk staff
- Over-privileged accounts required for day-to-day tasks
- Need to restrict visibility across decentralised teams
Why Change Was Needed
The organisation reassessed what was actually required from its identity management platform.
A simpler, more focused solution was needed—one that could deliver the necessary functionality without the associated cost, complexity, and dependency on external services.
Reducing overhead, improving agility, and tightening security controls were key priorities.
The Approach
Armstrong worked with the organisation to review existing functionality and design a streamlined identity management model aligned to Active Directory and Microsoft 365.
- Reviewing current platform usage and requirements
- Mapping existing processes into a simplified model
- Designing role-based access and visibility controls
- Planning a transition approach to minimise disruption
The focus was on retaining required capability while removing unnecessary complexity.
The Engagement
Armstrong worked with the organisation to transition from a complex, vendor-dependent platform to a more flexible and manageable solution.
The engagement focused on replicating required functionality while simplifying how identity management was delivered and maintained.
The initial transition was completed within a short timeframe, providing a rapid improvement in usability and control, with ongoing support delivered more efficiently and at lower cost.
The Solution
The existing platform was replaced with Adaxes, delivering the required functionality in a more efficient and accessible way.
- Replication of key identity management functionality within a simplified platform
- Introduction of a user-friendly web interface for service desk teams
- Role-based access to reduce privilege levels
- Controlled visibility based on organisational structure
- Faster and more flexible professional services support when required
What This Replaced
- Overly complex and costly identity management platform
- Dependency on slow and expensive vendor-led services
- Over-privileged service desk accounts
- Limited flexibility and slow change cycles
How It Works in Practice
Identity management is now simpler, faster, and more aligned to operational needs.
- Service desk staff use an intuitive web interface for routine tasks
- Users and groups are visible only where appropriate
- Tasks are completed without elevated permissions
- Changes can be implemented quickly without heavy external dependency
- Support is still available but delivered more efficiently
The Outcome
The organisation moved to a solution better aligned to its actual requirements, reducing both cost and complexity.
- Significant reduction in operational and support costs
- Rapid transition with minimal disruption
- Improved usability for service desk staff
- Reduced privileged access improving security
- Faster and more flexible change management
- Lower-cost, more responsive ongoing support
Key Takeaways
- “Enterprise-grade” does not always mean best fit
- Simpler solutions can deliver required outcomes more effectively
- Reducing complexity lowers both cost and risk
- Faster change cycles improve IT responsiveness
- Controlled visibility is essential in decentralised environments
