Aerospace industry

Client: A leading company in the aerospace industry
Platform: Softerra Adaxes
Integrations: Workday, AWS S3, Active Directory, Azure AD / Microsoft Entra ID, SPID SQL Database, JIRA Service Management
Consulting Partner: Nextware Technologies

Global aerospace operations require strict access controls, yet rapid international expansion often overburdens IT service management. Our client faced this operational friction across its facilities across the globe. Disconnected processes between Human Resources and IT caused day-one onboarding delays, manual ticket backlogs, and security risks from delayed terminations or orphaned contractor accounts. Nextware Technologies was retained to engineer a centralized Identity Lifecycle Management framework using Softerra Adaxes to automate account states directly from Workday data.

The architecture uses Workday as the single authoritative source. Scheduled HR report exports deposit CSV dumps into an AWS S3 bucket. An automated transport process pulls these files to an on-premise staging environment, where Adaxes executes hourly synchronization routines. By mapping Workday keys – such as Employee ID, Worker Type, and Location – directly to Active Directory attributes, Adaxes establishes a standardized identity foundation without manual data entry.

To solve first-day productivity loss, Nextware implemented a time-zone-aware onboarding cascade. Adaxes evaluates employee start dates and activates accounts exactly seven days prior to hire, calculating local time zones to ensure global readiness.

Once triggered, Adaxes generates secure temporary credentials, provisions Linux POSIX attributes, and moves the object to the correct regional Organizational Unit. It then queries an internal SQL database using the employee’s system profile ID to assign role-specific software, hardware, and Microsoft 365 licenses. Simultaneously, Adaxes formats and dispatches JSON payloads to JIRA Service Management, automatically creating tracked fulfillment tickets for IT staff and provisioning Entra ID cloud group memberships via Microsoft Graph API.

Offboarding automation addresses both security compliance and cost management. When a termination is entered in Workday, Adaxes holds execution until 6:00 PM on the employee’s final day in their specific time zone, preventing premature lockouts.

At the scheduled cutoff, Adaxes immediately disables the account, revokes group memberships, scrambles the password, and hides the user from the Global Address List. It evaluates mailbox size via PowerShell; accounts under 50GB convert to shared mailboxes and surrender their paid Microsoft 365 licenses immediately to eliminate waste. To prevent privilege lingering, a cascading rule identifies and disables any associated administrative accounts (such as elevated privilege or super-user accounts) linked to the employee. After a 16-day replication hold, Adaxes automatically moves the disabled object to an archive container.

By replacing manual administration with event-driven automation, we eliminated first-day access friction and reduced helpdesk workload. The solution enforces Zero Trust security through time-zone-precise terminations, cascading privileged account revocations, and automated license reclamation, establishing a scalable, audit-ready identity infrastructure.