Contact

Zero Trust Access to Microsoft 365 for One of India’s Largest Real Estate Companies

How Conditional Access, mobile SSO, containerisation and DLP secured email and productivity apps across 2,000 devices, without slowing users down.

INDUSTRY

Real Estate

SCALE

2,000 devices

PLATFORM

Omnissa Workspace ONE + Microsoft 365

ENGAGEMENT

Assess · Design · Deploy

The Challenge

Staff reached Microsoft 365 email and apps from any device, any network, with few controls:

  • Unrestricted access: corporate email reachable from unmanaged phones, PCs and browsers
  • Data leakage risk: no control over copy, paste or open-in for corporate content
  • Multiple logins: no single sign-on across mobile apps, hurting adoption
  • Manual onboarding: device enrolment and app provisioning handled by IT, one by one

Limited mobility: directory (GAL) lookups not available on the move

The Solution

ServiClan designed a Zero Trust access model using Workspace ONE and Microsoft 365 Conditional Access:

  • Mobile (iOS & Android): Workspace ONE MDM with SSO; unmanaged devices blocked
  • Desktop & browser: access allowed only from managed, domain-joined Windows, corporate IP or CASB IP ranges
  • Data Loss Prevention on permitted sessions to protect corporate data
  • Containerised email and productivity apps with cut, copy, paste and open-in controls

Self-service: enrolment, auto app entitlement, self-service portal and GAL access from anywhere

Assess

Mapped users, devices, access paths and data-leakage risks.

Design

Defined Conditional Access rules by platform, device state and network.

Deploy

Rolled out MDM, SSO, containerised apps and DLP to 2,000 devices.

Enable

Launched self-service enrolment, app entitlement and portal.

THE OUTCOME

Unauthorised access blocked

Corporate email reachable only from managed, compliant devices.

Seamless SSO

One sign-in across mobile productivity apps on iOS and Android.

Data stays corporate

Containerisation and DLP stop leakage to personal apps.

Network-aware access

Desktop and browser access tied to corporate and CASB IP ranges.

Self-service onboarding

Users enrol and receive their apps automatically.

Productive anywhere

Email, apps and GAL available securely on the move.

Want secure Microsoft 365 access on every device?

Book a free assessment call for a clear Zero Trust roadmap.
serviclan.com
Connect@ServiClan.com
+91 9833186818