CORE discusses how One Identity Active Roles provides value to their organization

[MUSIC PLAYING] My name's Tim Eichmann. I am the Head of Cloud and Infrastructure for Core Technology Systems. We are a managed service provider. And we have some unique selling points around doing identity as a service, using the Quest tool set for providing enterprise-classed identity to businesses ranging from 30 users to 22,000 users. I think the challenges that people face with Active Directory security today is extending that into the cloud and trying to maintain the same level and control that they have on-prem out in multiple cloud systems, I think the challenges as people adopt Azure AD is that it's actually a flat structure. So where we've got organizational units and control today, you start to lose that with the Azure AD. So you really need to wrap something on top of it to be able to manage it effectively. We're probably seeing around a 90% adoption rate. The majority of people using some form of SAS, and the first hop for most people seems to be the Azure Active Directory. I think the majority of people will be in a hybrid for some time. We have about three costumers who are actually 100% cloud. So for those customers that have been able to perform a green field lift and shift from their current system, purely 100% cloud. So for those customers who have found great value in having things like ActiveRoles, to still provide that management layer on top on the Azure AD. In terms of the value that ActiveRoles is giving people today, it's the ability to have a virtual view of their directory. So they're not tied to the structure of the AD, because that's designed around group policy. It's to have an abstraction for security, for administration. So it's giving you a unique view of the AD purely from a management layer. I think in terms of management solutions for AD, and Azure AD, it's going to be absolutely crucial to have something to extend from what they've got today on-prem into the cloud and just manage it, keep the automation, keep the workflow going. That way the extension into the Azure AD is not a burden on the administrators. The benefit the people will get from the Azure AD extensions with ActiveRoles is they've still got the same familiar interface, the same controls that they have got for the on-prem. And just taking those existing policies, workflows, and pushing those out to their SAS-based systems like Azure AD.