Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Managing user accounts, permissions and security access across a university environment involves significant administrative work. For institutions that rely on Microsoft Active Directory, keeping that infrastructure organized, secure and current can quickly become resource-intensive as student and staff populations shift each semester. This type of challenge grows when IT teams must handle onboarding, access changes and offboarding manually for each individual.

Authentication configuration issues, especially those tying into Kerberos, are a big call driver for the Active Roles by One Identity Support team. When Kerberos requirements are met, Integrated Windows Authentication typically attempts Kerberos before falling back to NTLM. Due to expected IIS functionality, we will see multiple HTTP requests which trigger authentication repeatedly.

Privileged access management (PAM) is one of the clearest ways to reduce identity-based risk and demonstrate security value. But ROI depends on more than simply deploying a PAM tool. Organizations need a solution that can be implemented efficiently, managed without unnecessary operational burden and scaled in a way that supports long-term cost control. For organizations evaluating PAM investments, these factors matter.

No city is designed to become complex. It starts with a simple plan with a handful of streets and a few neighborhoods. Then it grows. New districts appear, roads extend, bridges get built and temporary solutions slowly become permanent. As cities grow, complexity compounds, perhaps because that growth was never planned for. Identity environments follow the same pattern.

For years, sovereign cloud was basically a data center pin on a map. A vendor would point at Frankfurt or Paris and call it a day. That pitch doesn’t work anymore, and it stopped working fast. Between late 2024 and late 2025, the EU passed three separate rules that turned sovereignty from a talking point into something organizations now have to prove, on a schedule, with documentation, to a specific regulator.

Active Directory (AD) is the backbone many enterprises lean on for their IT environments. Yet, most organizations rarely govern the directory with the scrutiny necessary. This was the throughline of a recent webinar with Nitish Deshpande, senior analyst at KuppingerCole, and Robert Kraczek, global strategist at One Identity. The pair made a strong case for mediating admin access to AD, emphasizing just how easily compromised credentials can beget full-blown incidents.

Non-human identity management (NHIM) is the governance and security of machine, application, and service identities through standardized authentication, authorization and lifecycle controls. These identities often have elevated privileges, making them prime targets for exploitation, especially when left unmanaged. Effective NHIM reduces risk, strengthens compliance and ensures operational resilience. KuppingerCole notes:“One Identity solutions address all major NHIs.

If you work in IT for a medium-sized regulated business, you already know the truth: Your Microsoft environment didn’t become sprawling overnight. It grew through mergers, acquisitions, divestitures, reorganizations and the natural evolution of a business that’s constantly adapting. Every new business unit brought its own domain. Every acquisition added another tenant. Every project introduced new accounts, groups and privileges.

Safeguard 9.0 by One Identity is now available, built around three things privileged access teams care about most: less infrastructure to manage, a stronger case to bring to auditors, and coverage that reaches further into the systems your teams already rely on. Here's what's new.