Global children's rights organisation secures sensitive data and cuts overheads

Empowering individuals and communities worldwide

Plan International is a children’s rights organization with a focus on advancing equality for girls. Now more than 80 years old, the charity works with children, youth, supporters, and partners in over 75 countries around the world. Plan International’s mission for the next five years is to transform the lives of 100 million girls.

“We started as a community-based organization, but we work at all levels,” says Ellen Wratten, executive director of gender equality and girls’ rights. “If you really want to transform lives at scale, you need to work with governments on policies and you need to work with businesses. We also always work with children and young people—they’re the best advocates for the change they need to see.”

Plan International’s 12,000 employees speak different languages and live and work in various time zones. Technology is integral to the charity’s ability to communicate between global offices and work as a cohesive, effective team.

“Technology has been amazing in bringing us together,” Wratten says. “We use it in everything we do.”

Even more significantly, technology enables Plan International’s core work to advance children’s rights. The organization operates in challenging environments where highly sensitive data is difficult to collect and has historically been recorded on paper.

“We work with very vulnerable children, and keeping their trust is incredibly important to us,” Wratten says. “Therefore, we need to protect our data.”

Plan International also needed a more efficient and cost-effective identity and access management (IAM) system. The charity wanted increased flexibility to integrate with cloud applications and deploy those apps quickly. The team knew that by reducing their internal IT burden, they could free up resources to better deliver on their mission.

Tackling legacy on-premises systems and records

With a substantial amount of data being collected on paper, Plan International needed to find efficiencies in its processes. Employees were feeling the pain of cumbersome legacy systems. The status quo was not only time consuming to administer, it made storing and referencing information a challenge. This was especially problematic because in the not-for-profit sector, it’s crucial that organizations be able to evaluate their impact and compliance in a timely and transparent manner.

“It was a disjointed approach and a lot of manual work. Now, we’re becoming more of a technology driven organization,” says Gareth Evans, Plan International’s global IT architect. “The faster we can get from collecting data to digitising that data, looking at it, and reporting on it, the faster we can make effective strategic decisions.”

The previous systems also put stakeholders’ sensitive personal information at risk of falling into the wrong hands. It was crucial for Plan International to modernize its IT infrastructure and better protect this data. The organization needed to centralize IAM and eliminate security blind spots.

“Security is challenging in the places we work,” Evans says. “We’re working with some of the most vulnerable people in the world and we have to balance usability with security—and it’s a fine line. Phishing and ransomware attacks just continue to escalate, so it’s always our goal to keep improving our security.”

In addition to processes that drained resources and infrastructure that left data vulnerable to breaches, the legacy systems carried a high cost, as is typical in any organization with paper-based operations. Plan International wanted to optimize its workflows in order to direct funds to other areas of need and serve its stakeholders more effectively.

Prior to implementing Okta, Plan International was also heavily dependent on Active Directory (AD). The organization had customized AD over the years, and had reached a juncture where it needed to decide whether to continue investing in the technology or rethink its approach to IT infrastructure.

“AD was high maintenance and costly. We needed to change that, and that was the impetus for moving to the cloud,” Evans says. “At the end of the day, we're trying to carry out our work on restrictive budgets, and we want our efforts to have the biggest impact possible.”

Aligning on business needs—and values

Ultimately, Plan International’s technology needed to address the complex, urgent issues that children—particularly girls—face around the world. The charity had to evolve as its global stakeholders and partners adopted new ways of communicating and working with one another.

“Our business needs to harness the potential of technology, and we want young people to get the best out of that technology,” Wratten says.

Plan International’s strategy over the past five years has been to adopt as many cloud-based solutions as possible to allow its IT team to bring maximum value to the organization. The charity wanted to free up time spent overseeing things like data centres and IP connectivity.

“We wanted to be buying, not building, and really move into driving volume in our investments,” Evans says. “We’re trying to move not just to the cloud, but to the stars.”

The nature of Plan International’s work necessitates that it be open to new tech solutions. The charity is currently working on a global monitoring and evaluation (M&E) system that will allow data to be collected on a mobile device, then immediately be sent to the system. The organization needed an access management partner to help steward this shift in operations.

“The M&E system will allow us to more clearly assess the impact we’re having in different regions—where it’s maximized and where we can improve,” Evans says.

In addition to meeting business requirements, it was important to Plan International to find an identity partner with similar values. The charity’s tender process includes a scorecard that measures capability, cost effectiveness, and organizational philosophy.

“We get the most value when there’s a true partnership in place and you're willing to give more than technology, but time and effort and experience, and really engage with the unique challenges we face,” Evans says.

Plan International found that Okta’s IAM solution checked all the requisite boxes, but on an equally important level, that the company shared in its commitment to the humanitarian sector through the Okta for Good initiative. This program offers not-for-profit organizations 25 free licenses for Okta products as well as preferential pricing for additional licenses and products.

“Learning about Okta’s humanitarian philosophy showed us a commitment level to the not-for-profit sector that doesn’t always exist with vendors. Okta wasn't simply the right technology choice—it was the right organization for us to partner with. It’s the people who make a difference in a relationship,” Evans says.

Deploying new tech quickly and painlessly

Now that Plan International and Okta had aligned on a vision that incorporated both business requirements and organizational values, the charity’s first step was to deploy Okta’s Single Sign-On (SSO) and integrate it with Workplace by Facebook. Plan International wanted to roll out the new SSO technology quickly and leverage features like the customizable user experience, secure directory, and real-time security reporting.

“This was our first real cloud-based solution, and we didn't want to go through the challenges we’d been through in the past or have it be a significant part of the project,” Evans says. “With Okta, it only took us 15 minutes to deploy, and our users had access with the same username and password. There was no training. It was just easy.”

In addition to the benefits that both employees and external stakeholders gain from SSO in terms of workflow and user experience, Plan International can also manage access with greater ease through Okta’s Universal Directory. The charity now has one central location where it can oversee all users, groups, and devices from any number of sources—and it integrates with AD, which means no more infrastructure sprawl.

“Now that we’ve moved from an on-premises system to the cloud, the speed that we can deploy applications with Okta will take away months of design, configuration, and custom development. It will leave us with quick and easy decisions such as, ‘Who are we going to give access to?’,” Evans says.

Plan International also deployed Okta’s Lifecycle Management for Workplace by Facebook and Office 365. The organization is working on custom development for its old identity synchronization solution to integrate with Lifecycle Management as well. Automation and pre-integrated provisioning are just two of the time and cost saving benefits to the charity. These features drastically reduce the hours previously spent on manual IT work, and the possibility for error when assigning permissions.

Plan International has also found value in the Okta Integration Network. The network enables fast, seamless integrations with apps, human resources information systems, and infrastructure as a service provider.

“The Okta Integration Network has become a marketplace for us. When we’re looking for capability, it’s one of the first places we look because we know if we choose a solution on the network, it will save us both time and money associated with deployment,” Evans says.

Taking a customer-first approach to identity

Plan International is now more customer focused than ever, and modern IAM has helped enable that shift in direction. The organization’s IT team can spend time focused on the business and how its tech solutions can best serve customers.

“Instead of getting bogged down by designing integrations into identity solutions, our team can try to amplify the value we get out of those apps. We don't need IT people focusing on Okta,” Evans says.

Plan International’s citizen registration program is a prime example. The charity’s innovation team is currently working with the Government of Bangladesh to implement this app at scale—a process that will be faster and smoother with Okta’s integration capabilities.

“This is really important for children and girls’ rights, because if you haven't got an identity, it's very difficult then to get into school and access the services you need as you grow up,” Wratten says.

Plan International now also has greater visibility to data that helps inform strategic decisions. The organization has integrated Okta with its financial enterprise resource planning system, which allows for more insight into cost effectiveness of various operations.

“This change is going to improve how we work so we can have more impact in the world and better accountability to ourselves and our stakeholders,” Wratten says.

User experience has also improved for Plan International’s staff since it deployed Okta, although it still has some applications left to integrate. One of the charity’s goals was to reduce IT friction to allow its employees to focus on their core work of helping children, instead of trying to remember different access credentials for multiple systems.

“If you're working in the most remote place in the world, the challenges you have are going to be numerous. Username and password shouldn't be one of those,” Evans says. “Connectivity is always going to be a challenge, but we can take IT as a problem away.”

Continuing to aim high

Plan International has undergone a great deal of change in the past 80 years, and the organization is still very ambitious. The charity knows it will require strong partnerships to reach that objective—including partnerships with the technology sector.

“By working with others, we can do so much more,” Wratten says. “We want to live in a world where every girl and every boy can learn, lead, thrive, and make their own decisions.”

Data is the keystone of Plan International’s digital strategy, and the knowledge gained from data is essential to how the charity will deliver on its mission. Modern IAM allows the organisation more visibility into its impact in the world, as well as how it fares on issues such as compliance.

Looking forward, Plan International has its eyes on Adaptive Multi-Factor Authentication as a potential next step. This solution incorporates a wide range of second factors to enhance app security and leverage user account history for risk analysis.

“We have to move with the times. We have to accept that the data that we have is very sensitive and that more people are trying to get access to it,” Evans says.

As technology such as AI and machine learning as well as predictive analytics becomes more prevalent, Plan International sees an opportunity to move into this space and leverage these tools to set itself apart from other organizations.

“I’ve gotten to see the evolution of technology over my 17 years here,” Evans says. “We've gone through the growth of our data center to moving out of the data center, and now from on-premises to the cloud. What excites me is what we can do with data, and how we can use Okta to help us benefit more than we ever could have done on our own.”

About Plan International

Plan International is an independent development and humanitarian organization that advances children’s rights and equality for girls. Founded in 1937, today Plan International works with government and private sector partners around the globe. Its mission is to transform the lives of 100 million girls within the next five years.