A World-leading Media Organization Builds a Future-ready Identity Platform

Together we achieved:

Unified over 35,000 identities into a single Active Directory domain, eliminating duplication
Enhanced security, performance, and scalability while freeing up IT resources
Established a foundation for future-ready identity governance

The Client

The client is the world’s leading public service media organization, spanning news, sports, entertainment, and production across television, radio, and digital platforms. Employing over 35,000 people globally, they operate in multiple regions and deliver award-winning programming in over 40 languages. Known for their editorial independence, they play a vital role in shaping global media standards.

The Challenge

The client faced significant operational challenges in managing digital identities across its global workforce of over 35,000 employees. Its legacy platform had become difficult to govern, generating a high volume of duplicate identities, roles, and security groups. This complexity demanded a 900-person IT team to manually manage access—making the process resource-intensive, hard to govern, and expensive.

As a publicly funded organization, the organization needed a modern identity solution that could streamline operations, reduce risk, and support secure, role-appropriate access across its enterprise.

Concerns over revoking access to essential resources—especially for senior staff—led to cautious governance, while the rise of external web-based tools introduced new security risks outside the client’s control. The platform lacked automation and scalability, complicating access for permanent employees, freelancers, and contractors. In some cases, a single external worker could accumulate multiple identities over time, further straining governance.

The Journey

To address the client’s identity management challenges, Ensono led a major transformation program using ForgeRock’s Digital Identity platform, deployed on Amazon Web Services (AWS). The solution introduced a hybrid Attribute-based Access Control model, with some elements of Role-based Access Control, to help the client regain control over its growing number of roles and security groups.

At the heart of the new model were “birth-right roles”— standardized access privileges automatically assigned based on an individual’s department or function. When someone moved to a new department, their previous access was removed and replaced with the appropriate new profile, reducing the risk of privilege accumulation.

The system was designed to support both internal and external users. To reduce identity duplication, Ensono implemented a process that checks new joiners against existing records. If a match is found, the existing identity is reactivated, maintaining a consistent audit trail across multiple contracts.

Working closely with client stakeholders, Ensono consolidated multiple identity domains into a single Active Directory domain. This gave the client a unified view of its 35,000-plus identities and laid the groundwork for improved automation, governance, and scalability.

The Outcomes

The client’s new identity platform delivered clear improvements in automation, governance, and operational efficiency. Key outcomes:

Unified over 35,000 identities into a single Active Directory domain, eliminating duplication and improving visibility.
Introduced “birth-right roles” to simplify access management and reduce manual effort.
Streamlined access provisioning for internal staff and external contributors through automation and identity reuse.
Freed up the organization’s IT resources by automating identity processes, allowing them to focus on strategic initiatives.
Enhanced security, performance, and scalability with a modern ForgeRock platform deployed on AWS.
Established a future-ready foundation for global identity governance and access control.

What can Ensono do for you?

Ensono helps enterprises modernize with confidence—solving complex challenges with practical, scalable solutions. For an initial conversation about your needs and our services and solutions, please complete this form. A member of our team will be in contact soon.

PHAgY2xhc3M9Imhhcy1oLTMtZm9udC1zaXplIj48c3Ryb25nPlRoYW5rIHlvdSE8L3N0cm9uZz4gPC9wPg==

Get more client success stories like this

Case Study

Bolstering Confidence Across 10 Million People While Combating Fraud

Learn how Ensono’s identity specialists helped enhance the security and reliability of a government-run company register while reducing fraud and increasing information accuracy for over 10 million people.

Read the case study