Cloud-native identity, delivered without disruption

Technology company, DACH region • Hybrid AD to Entra migration

The Client

LucaNet AG

Software & Financial Technology

Founded: 2002

Headquarters: Berlin, Germany; offices in Vienna, Zurich, and Amsterdam

Employees: > 600 globally; 250+ in DACH region

Market Position: €85 million (2023)

LucaNet AG is a leading provider of corporate performance management and financial consolidation software. The company serves over 3,000 customers across Europe, offering cloud-based and on-premises solutions for financial reporting, planning, and analysis. LucaNet's software is used by mid-market and enterprise companies to streamline their financial processes and ensure regulatory compliance.

Project at a glance

Complete migration from hybrid Active Directory to cloud-native Entra ID environment
2,500+ users requiring seamless identity transition without service disruption
15+ integrated systems requiring identity authentication updates
Legacy on-premises infrastructure elimination while maintaining security
Enhanced security posture through modern identity management
Comprehensive documentation and knowledge transfer to internal IT teams

Challenge

LucaNet AG operated a hybrid Active Directory and Entra ID environment that created complexity and security vulnerabilities. As a rapidly growing financial technology company serving over 3,000 customers across Europe, they needed to eliminate on-premises identity dependencies, streamline device management, and modernize their IT environment without disrupting critical business operations or customer services.

Solution

A comprehensive cloud-native identity strategy was implemented to transition from hybrid infrastructure to a fully cloud-based model. Advanced automation eliminated manual processes, enhanced security frameworks protected business operations, and modern device management streamlined IT operations across all locations.

Key implementation phases:

Assessed hybrid environment and verified application compatibility with Entra ID and Entra Domain Services

Tested third-party tools to replace PKI and NPS where required

Set up Entra Domain Services with directory extensions and migrated applications to Entra ID or LDAP authentication

Created certificate hash script to maintain NPS functionality, including dummy objects for cloud-only devices and users

Developed PowerShell script to migrate Windows devices from hybrid join to cloud-only while preserving profiles

Optimized Intune policies and ensured TeamViewer availability at login screen for support

Automated migration tasks and employee communications using Azure Automation and Power Automate

Created project roadmap and managed tasks in Jira Cloud, with documentation stored in Confluence

Migrated devices step-by-step, decommissioned hybrid sync, and completed switch to cloud-native

Provided post-migration support and fine-tuned client policies

Benefits

Seamless migration to cloud-native environment achieved with zero business disruption
Complete elimination of on-premises identity dependencies and associated maintenance overhead
Enhanced security posture through modern Conditional Access and identity protection
Streamlined device management across all European offices through Intune
Improved IT operational efficiency through automation and cloud-native services
Reduced infrastructure costs by eliminating on-premises Active Directory servers
Future-ready architecture supporting business growth and expansion plans
Comprehensive documentation enabling internal team self-sufficiency

Client voice

"The migration to cloud-native identity was executed perfectly with zero impact on our business operations. Our IT infrastructure is now simpler, more secure, and ready for our continued growth across Europe."

Michael K., Head of IT Infrastructure