Topic starter
12/06/2026 10:02 pm
TL;DR: Accenture’s identity programme unified phishing-resistant MFA across hundreds of Active Directory environments and reduced highly privileged AD admin accounts by about 50%, according to Axiad. The case shows that acquisition-heavy enterprises need identity controls that scale faster than migration projects and still preserve centralized governance.
Editorial analysis by NHI Mgmt Group, based on content published by Axiad: “Why Accenture Is Axiad's 2025 Customer of the Year”.
Key questions
Q: How should security teams govern identity across acquired Active Directory environments?
A: They should standardise authentication and administrative control before expecting full technical consolidation.
Q: Why do acquisition-heavy enterprises struggle to standardize authentication quickly?
A: Because migration timelines are usually slower than business integration timelines.
Q: What are the signs that identity governance is not keeping pace during post-merger integration?
A: Common warning signs include orphaned accounts, unmanaged shadow IT access, incomplete visibility into local and machine identities, and legacy identities whose ownership or purpose is unknown.
Practitioner guidance
- Map inherited Active Directory estates Inventory every acquired AD environment, identify where authentication policy still differs, and classify which estates can accept a common trust standard before full migration.
- Enforce phishing-resistant authentication early Use certificate-backed or equivalent phishing-resistant authentication as a bridge control while migration work is still in progress, rather than waiting for consolidation to finish.
- Measure privileged account reduction Track how many highly privileged admin accounts remain after each integration wave and require every acquisition plan to show a downward trend in standing privilege.
Bottom line: The article shows that acquisition growth creates identity fragmentation unless the enterprise can impose one authentication and governance standard across inherited environments.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
13/06/2026 12:31 am
Acquisition-driven identity governance is now a scale problem, not a directory problem. The article shows that hundreds of inherited AD environments cannot be treated as separate exceptions waiting for eventual cleanup. When acquisition pace outstrips migration pace, the identity programme becomes the only control plane that can impose consistency across the combined estate. Practitioners should read this as a governance warning: if the standard cannot travel with the acquisition, the risk travels instead.
A question worth separating out:
Q: What should teams do when they cannot finish directory migration before business integration?
A: Use a portable trust control that works across multiple environments, then remove standing privilege as part of the integration plan. That approach keeps authentication consistent while the broader migration is still underway and reduces the number of elevated identities that an attacker could target during the transition.
👉 Read our full editorial: Accenture's identity standard shows how acquisition scale reshapes IAM