Royal Cosun streamlines cross-domain identity management with ManageEngine AD360

Business challenges

• As a rapidly expanding enterprise, Royal Cosun’s IT landscape spanned six Active Directory domains, each isolated for compliance reasons. The IT team had to create and maintain identical user accounts in multiple domains for the same individual, ensuring each account retained the same identity attributes.
• Although Royal Cosun already had an in-house identity creation workflow to manage users in Active Directory, it needed an easy-to-use bulk user management solution to simplify administration, reduce dependency on scripts, and seamlessly integrate with Workday, its HRMS tool. Limited cross-domain visibility, manual provisioning, and the absence of unified reporting further slowed operations and increased administrative workload.
• The team needed an out-of-the-box scalable IAM solution that could adapt to its environment, simplify operations, and lay the groundwork for eventual Workday integration.

The problem

Royal Cosun’s multi-domain Active Directory environment faced operational complexity. Each employee required identical accounts across six domains to meet compliance standards and operational requirements. While the existing system automated account creation, it didn’t support multi-domain provisioning or bulk user management.

The IT team needed a solution that could centralize management, eliminate manual effort, and ensure compliance from a single console with an interactive UI, rather than depending on PowerShell scripts.

The solution

The Royal Cosun Group availed OnboardPro, ManageEngine's implementation and onboarding service, for an onsite implementation of ADManager Plus. OnboardPro ensured the deployment was tailored to its business needs and aligned with industry best practices. The product implementation expert visited Royal Cosun's office, collaborated closely with its IT team to understand requirements, provided guidance on best approaches, and implemented the solution, seamlessly integrating the solution with Royal Cosun's existing system.

With the help of event-driven automation, workflows, and attribute mapping, a cross-domain identity management workflow was built without any third-party integrations or scripting.

The implementation included:

• Scheduled reports filtered by domain-referenced groups.
• Automated creation of new-format user accounts referencing primary accounts via the Microsoft-based field extensionAttribute1, where each new account references its primary account, and the primary account stores the reference to the newly created user account.
• Multi-domain automations using attribute-based logic to replicate and synchronize identities.
• Scheduled modification workflows via user modification template s for consistent updates.

With this setup, Royal Cosun achieved end-to-end multi-domain provisioning and synchronization, ensuring compliance, accuracy, and scalability across six domains in just two days.

Royal Cosun’s IT team highly appreciated the hands-on expertise and deep industry knowledge from the OnboardPro team, describing the onboarding experience as exceptional.

About ADManager Plus

ADManager Plus is an identity governance and administration (IGA) solution that simplifies identity management, ensures security, and improves compliance. With ADManager Plus, manage the user life cycle from provisioning to deprovisioning, run access certification campaigns, orchestrate identity management across enterprise applications, and protect data on your enterprise platforms with regular backups. Use over 200 reports to gain valuable insights into identities and their access rights. Improve the efficiency of your IGA operations with workflows, automations, and role-based access control policies. ADManager Plus' Android and iOS applications help with on-the-go AD and Azure AD management. For more information about ADManager Plus, visit https://www.manageengine.com/products/ad-manager/.