245,000
identities moved with zero downtime
200 apps
moved in waves of 10 to 15
30,000 users
on phishing-resistant MFA across four continents

The challenge

A global secure logistics company ran employee and customer sign-in on a third-party identity platform, though its Microsoft 365 licenses already included Microsoft Entra. Paying for both added cost and complexity. Moving was risky: the company operates worldwide under strict compliance rules, and its customers rely on applications that can’t go down.

What we did

  • Designed Microsoft Entra ID for employees and Azure AD B2C for customers, proved it with a pilot and inventoried every application.
  • Moved employees in 2023–24 and customers in 2024–25, running both platforms side by side so nothing went down.
  • Automated joiners, movers and leavers for 20,000 frontline workers with Microsoft Entra ID Governance and the company’s HR system, and synchronized identities across three tenants for acquired businesses.
  • Ran MFA change management on four continents, with user guides in Spanish, French and other languages.

What’s next

Employees and customers now sign in through Microsoft, and Invoke continues to support global onboarding and identity lifecycle automation.

All customer stories