Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How Active Roles by One Identity supports IAM in a university environment

Managing user accounts, permissions and security access across a university environment involves significant administrative work. For institutions that rely on Microsoft Active Directory, keeping that infrastructure organized, secure and current can quickly become resource-intensive as student and staff populations shift each semester. This type of challenge grows when IT teams must handle onboarding, access changes and offboarding manually for each individual.

Best practices: How to implement Kerberos authentication correctly in your AD environment

Authentication configuration issues, especially those tying into Kerberos, are a big call driver for the Active Roles by One Identity Support team. When Kerberos requirements are met, Integrated Windows Authentication typically attempts Kerberos before falling back to NTLM. Due to expected IIS functionality, we will see multiple HTTP requests which trigger authentication repeatedly.

PAM ROI: Modern privileged access management pays for itself

Privileged access management (PAM) is one of the clearest ways to reduce identity-based risk and demonstrate security value. But ROI depends on more than simply deploying a PAM tool. Organizations need a solution that can be implemented efficiently, managed without unnecessary operational burden and scaled in a way that supports long-term cost control. For organizations evaluating PAM investments, these factors matter.

'Set menu or à la carte?' Customizing the Identity Manager UI

A “set menu” or “à la carte” design? Drawing on nearly 12 years of experience using Identity Manager by One Identity, Andrew Edney, a lead consultant at iC Consult, gives a lightning-quick breakdown of useful UI customization options using Designer, including changes to overview forms and updating navigation with features like custom filtering.

10 MCP Security Best Practices

A natural-language decision can now trigger a real API call, query sensitive data, deploy code, or modify infrastructure. MCP expands the security boundary beyond the connection to the identities, privileges, tools, credentials, and downstream systems behind each action. That challenge is growing with adoption. Anthropic reported more than 10,000 active public MCP servers by December 2025, alongside 97M+ monthly downloads of its Python and TypeScript MCP SDKs.

How identity sprawl is quietly expanding your attack surface

No city is designed to become complex. It starts with a simple plan with a handful of streets and a few neighborhoods. Then it grows. New districts appear, roads extend, bridges get built and temporary solutions slowly become permanent. As cities grow, complexity compounds, perhaps because that growth was never planned for. Identity environments follow the same pattern.