Description

User account management (Active Directory, SSO)

Description:

This service provides centralized management of user accounts, credentials, and access permissions across IT systems using Active Directory (AD) and Single Sign-On (SSO) technologies. It ensures secure, efficient, and policy-compliant identity lifecycle management for all employees and system users.

Scope of Service:

• Account Administration:

  • Creation, modification, and removal of user accounts in Active Directory.

  • Group and role assignment to control resource access.

  • Password management, account unlocking, and recovery assistance.

  • Synchronization between on-premises AD and cloud directories (Azure AD, Google Workspace, etc.).

• Authentication & Access Control:

  • Configuration and management of Single Sign-On (SSO) and Multi-Factor Authentication (MFA).

  • Policy enforcement for password complexity, expiration, and account lockout.

  • Access provisioning and de-provisioning workflows for onboarding/offboarding.

  • Integration of business applications with AD/SSO for seamless user access.

• Monitoring & Compliance:

  • Regular audits of user accounts and permissions.

  • Logging and reporting of login activity and access changes.

  • Compliance alignment with data security and identity management standards.

Deliverables:

• Updated and secure user account directory.

• Access control and authentication policy documentation.

• Audit and compliance reports.

• User access and permissions matrix.