Designing Enterprise MFA and Office 365 Security Architecture for a Global Fortune 500 Pharmaceutical Company

The Challenge

A global Fortune 500 pharmaceutical company was undergoing a cloud transformation that required rolling out multi-factor authentication and Office 365 across its entire workforce of 20,320 employees. At that scale, the risk wasn't just technical — a poorly designed identity architecture could disrupt production systems, create access gaps during the transition, or fail to hold up against the security requirements of a highly regulated, global pharmaceutical environment.

The company needed an enterprise security architecture that could support the rollout without compromising security best practices or slowing down the business.

The Engagement

Ozoar was brought in as Security Architect for a 3-month engagement focused on the identity and access foundation of the transformation:

Enterprise security architecture design. Designed security architectures spanning both existing production environments and the cloud-transformation environment being stood up alongside them — ensuring the two could operate securely during the transition period rather than treating it as a hard cutover. Azure identity architecture. Architected the Azure security solutions integrating Microsoft MFA, ADFS, identity management, and secure access controls that would underpin authentication for the entire employee base going forward. Closing architecture gaps. Identified and closed design gaps in the proposed architecture with scalable solutions that balanced the business's operational requirements against security best practice — rather than defaulting to either extreme.

The Results

• 100% MFA adoption achieved across all 20,320 employees
• A unified Azure identity architecture — MFA, ADFS, and access controls designed as one coherent system rather than bolted-on point solutions
• Production and cloud-transformation environments secured in parallel, without forcing a disruptive all-at-once cutover
• Architecture gaps closed with scalable solutions, avoiding one-off fixes that would need to be revisited as the company continued its cloud transformation

Key Takeaway

At enterprise scale, MFA and identity rollouts fail or succeed based on the architecture behind them, not the rollout mechanics. Designing the Azure identity architecture — MFA, ADFS, and access controls — as one integrated system, and doing it in a way that kept production stable during the transition, is what made 100% adoption achievable across more than 20,000 employees.

Planning an enterprise MFA, identity, or cloud security architecture project? Get a security assessment and talk to an Ozoar security expert about designing it to scale from day one.