Sodexo turns to Active Roles for trustworthy AD management

My name is Joffrey Meyer. I work for Sodexo, a French company, and I'm an Identity Functional Analyst. We are mostly known in French for food, like in the universities and school. But we do a lot more like facilities management, remote site management. For instance, there are some oil platforms that we take care of and things like that. And we are in 80 countries. And we have 430,000 employees around the globe. The main security risk for Sodexo are industry, I would say. There are a lot, like the usual ones, so fishing, for instance, and data theft, data extraction also. That's why we have implemented a lot of new security tools to help us prevent that. We didn't have a global service desk. All the entities were responsible to manage their own object in Active Directory. So we were looking for a validation tool, but not any validation tool, because basically you can do delegations in Active Directory directly. But we needed fine-grained delegations with custom access templates to ensure that people only had access to what they needed and nothing more. We had a lot of forests with a lot of companies, and there was a globalization of everything. So now we only have one single forest with five domains. And so at that time, when we migrated all the domains to our global domain, we were looking for the tool and achieve roles came on top. Now, they are fully autonomous, so they can do it directly themselves. So it's really fast, really easy for them. I would also say that it adds a lot of standardization because they are not allowed to do anything that they want. We have a global usage frame that we define globally. And then as long as they follow this frame, they are good to go. I would say that, globally, we decrease the amounts of tickets by a lot because everything is managed locally now, directly by the entities. Maybe also some resolution times that dropped a lot because, again, they are autonomous, so they can do it whenever they want. It's a complete tool that can manage all the AD objects, all the properties, and everything. It's extending also to Android, so it means that it is evolving. It is not relying on a dying technology like Active Directory can be. So it's moving in the right direction. And I think it's great. And it's a good recognition for Active Roles because it has been a very useful tool on a daily basis. You must scope what people need to do. Because if you give them too much permission, they will not understand what they are doing, and they will use it. So that's why Active Roles helped us a lot because you can scope to limit the permissions that a user or helpdesk can have and make sure that they stay where they need to stay. I would recommend Active Roles in One Identity because they never disappointed us. We have always had good relationship with One Identity. Let it be the salesperson but also the technical teams. The presales also have been a lot of great help to us because they've shown us and demoed the solution, the next features, and everything. So yeah, that's why I would recommend it because you have a whole package. [MUSIC PLAYING]