Unifying 130+ school systems with zero-downtime identity transformation

Download PDF

Client overview

• A large U.S. state education department that helps educators and administrators improve student outcomes using data-driven insights
• Responsible for modernizing a unified analytics platform that monitors statewide, division-level and school-specific student performance over time
• Manages 130+ school divisions, each of which uses its own identity provider (IDP)

Objectives

• Modernize a web-based analytics platform to help educators track student performance across 130+ school divisions
• Automate access management without disrupting existing operations or forcing IDP migrations
• Create unified access to six statewide applications while enhancing data privacy compliance
• Deploy a federated identity solution with zero downtime in record time

Why Unisys?

• Proven track record of helping state agencies launch new technology without disrupting operations
• Ability to integrate AI-powered data intelligence, cost-effective cloud solutions and robust cybersecurity protections into complex government technology environments
• Provides a suite of identity-based solutions tailored to highly regulated public sector organizations
• An extensive history of helping public agencies comply with federal- and state-level data privacy regulations
• Vendor-neutral management experts who can deploy rapid cybersecurity improvements based on real-world testing, attack scenarios and risk mitigation

Solution

• Deployed the Digital Identity and Access Management solution to create a federated identity model that integrates all existing IDPs into a single common tenant
• Used the Okta single sign-on (SSO) solution, combined with identity and access management (IAM) architecture, to build a single authentication platform
• Implemented just-in-time (JIT) provisioning to automatically create user accounts upon the first login, eliminating manual onboarding and allowing for real-time, role-based access to six shared applications
• Enhanced the department’s cybersecurity protections with Zero Trust security principles and ensured compliance with federal and state regulations through a combination of role-based access control (RBAC), multi-factor authentication (MFA) and audit logging
• Deployed the solution with zero downtime and maintained uninterrupted access to student data

Results and benefits

• Built and deployed a large-scale common-tenant IDP with zero downtime and without disrupting operations, completing the project in record time
• Automated user provisioning and access management controls to minimize administrative workloads and save time spent on manual entry
• Reduced technology infrastructure and maintenance costs by eliminating the need for individual schools to manage IAM solutions
• Centralized authentication controls strengthened data security and access governance, boosting compliance with federal and state regulations
• Provided administrators, educators, students and the public with a seamless login experience without needing to change individual authentication tools
• Built a scalable IAM solution that allows for future growth and the ability to easily integrate new divisions and applications into the environment
• Enabled public access, allowing parents and community members to access student performance reports and data visualizations
• Seamlessly integrated numerous IDPs from 130+ school divisions into a single common tenant without a change in individual authentication providers

A state education department transformed student performance tracking and improved cybersecurity compliance by partnering with Unisys

A large state education department needed to modernize its web-based visualization and analytics solution platform that helps educators track and analyze student performance over time. However, it faced significant challenges in managing identity and access controls within the analytics platform used by the state’s 130+ school divisions. Each division used its own IDP, which created a fragmented system that required manual user registration, data entry, monitoring and maintenance. The department partnered with Unisys to build a custom IAM solution to modernize operations, improve administrative efficiency and enhance compliance with data privacy regulations.

Fragmented identity providers create barriers to student performance data and cybersecurity vulnerabilities

The primary goal of this partnership was to create a secure, unified platform for tracking and analyzing student performance data over time. However, the existing system consisted of multiple IDPs, forcing department administrators to register new users manually and upload data. This human-powered data entry was subject to errors and was a time-consuming and costly process.

The fragmented IDP tools used across the department’s 130+ school divisions also made it difficult for stakeholders to access the six statewide student data applications. The department needed a custom-built solution that could integrate seamlessly with the existing IT environment and be launched with zero downtime or operational disruption. They also needed to enable the analytics platform to deliver data-driven insights to educators and administrators.

Unisys is a trusted partner for public-sector innovation

The department chose Unisys because of its proven expertise in public sector innovation and track record of delivering identity-based solutions for highly regulated industries. The Unisys approach to public sector technology environments includes AI-powered intelligence, modern cloud solutions, enhanced cybersecurity protections and modernized workflows custom-built for government clients.

Unisys also offered the department access to vendor-neutral experts who provide ongoing security expertise, real-world testing and risk mitigation strategies. This ensures the IAM infrastructure is scalable and prepared to meet the future demands of educators, policymakers and the public.

Unisys builds a unified framework for school districts using Okta-powered identity and access management

Unisys implemented a federated identity model that integrated existing IDPs into a common tenant, eliminating access management challenges and automating manual user registration processes. Each school division was allowed to keep its authentication provider despite being integrated into the department’s unified IAM framework. Unisys used the Okta SSO solution and custom IAM architecture to develop the centralized authentication platform.

The key innovation was just-in-time (JIT) provisioning, which automates user account creation after the first login. This reduced the need for manual user registration and data entry, reducing errors and ensuring real-time, role-based access to all six shared applications. Unisys also integrated stringent security policies to comply with state and federal data privacy regulations, including RBAC, MFA and audit logging.

Non-disruptive identity model deployed across 130+ school divisions with zero downtime

Unisys successfully deployed a federated identity model across all 130+ school divisions with zero downtime in record time, setting a new benchmark for large-scale IAM implementations in education. This ensured that administrators, educators and students maintain uninterrupted access to student performance analytics without disruption and set a new benchmark for large-scale IAM implementations in education and the public sector. Allowing school divisions to keep their existing IDPs was key to minimizing disruption and avoiding the high costs associated with forced IDP migrations.

This innovative solution generated considerable value for the state department and its school divisions by reducing administrative workload, eliminating manual user registration and saving countless hours associated with monitoring and maintenance. In addition, the single common tenant reduced cybersecurity vulnerabilities and strengthened data security, helping the department comply with federal and state regulations governing data privacy.

Building long-term scalability and adaptable technology environments for public education

The partnership between Unisys and the state education department successfully transformed the state’s IAM capabilities with a federated identity model. This reduced manual data entry, automated user authentication and streamlined access management without forcing individual schools to change IDPs. As a result, the department significantly reduced IT and administrative costs while improving compliance with data privacy protections.

The new system also improved stakeholder user experience and increased public access to student performance data, allowing parents and community members to access reports and data visualizations. This demonstrates how a strategic identity management solution can drive government innovation, enhance educational outcomes and increase public trust in institutions.

To learn how Unisys can help your agency achieve similar results, visit us online or contact us today.