After a successful proof of concept, IRCEM moved quickly to deploy Silverfort across its environment. IRCEM completed the deployment in two weeks with support from Wakers and quickly transitioned to managing the platform independently, ultimately securing 20 sensitive service accounts and 24 highly-privileged users.

IRCEM started using Silverfort by creating and enforcing custom policies for admin accounts with MFA protection for critical operations such as Windows and Linux server access, VMware management, and Active Directory tasks.

They also integrated Silverfort with Microsoft Teams to receive real-time alerts on security events with different risk levels, helping them with account behavior monitoring and malicious activities in-depth investigation.

For service accounts, IRCEM leveraged Silverfort’s report-only mode to observe authentication patters without disrupting machine-to-machine operations. Once they gained confidence in the expected behavior of each service account, the IT team gradually applied deny policies, using Smart Policy to automate decision-making process and reduce manual overhead.

IRCEM started with MFA enforcement for its privileged users and then shifted focus to securing service accounts. The IT team began by monitoring service account activity to understand how each one behaved, prioritizing visibility before enforcements, particularly for accounts used across critical systems. Once IRCEM had a clear baseline, they used Silverfort's Smart Policy to apply conditional access controls and block risky usage without disrupting operations.

Silverfort’s logs screen became one of the key capabilities for IRCEM IT team’s daily operations, often replacing traditional SIEM tools for identity-related investigations. The team found it easier to identify failed authentications, outdated credentials, and weak protocols usage, including NTLM – all of which were previously challenging to trace.

IRCEM is a Lille-based social protection organization serving individuals employed in the personal and home care sectors across France. As a member of the Agirc-Arrco network, IRCEM plays a central role in managing retirement and complementary pension benefits for a broad population of domestic workers, caregivers, and service professionals.

With increasing oversight from state-mandated regulatory authorities, IRCEM faced increasing pressure to secure its privileged accounts and comply with mandated identity security controls. Agirc-Arrco, a French state agency that regulates retirement and pension organizations, conducted an audit and made their requirements clear: securing domain admins and service accounts was no longer optional – it was mandatory.

IRCEM recognized this critical gap in their existing identity security layer and understood the need to strengthen security controls for both human and non-human identities (NHIs) without disrupting daily security operations. The ideal solution had to have the ability to enforce MFA for high-privileged users and provide real-time visibility into service accounts’ activity.  IRCEM sought a solution that could seamlessly integrate into their on-premises environment, without requiring complex configurations or a lengthy deployment process.

IRCEM recognized this critical gap in their existing identity security layer and understood the need to strengthen security controls for both human and non-human identities (NHIs) without disrupting daily security operations. The ideal solution had to have the ability to enforce MFA for high-privileged users and provide real-time visibility into service accounts’ activity.  IRCEM sought a solution that could seamlessly integrate into their on-premises environment, without requiring complex configurations or a lengthy deployment process.

IRCEM began evaluating solutions to strengthen identity security controls across their on-prem environment. Initially, they explored several traditional PAM solutions to monitor and protect privilege accounts through session control.

However, these tools quickly revealed a major limitation: while they helped secure human admin accounts, they failed to protect non-human identities, including on-prem service accounts, which remained exposed.

IRCEM needed more granular visibility into service account’s authentication trails. After seeing a demo from Silverfort’s local partner in France, Wakers, IRCEM was impressed by the platform’s capabilities and moved forward with a proof of concept (POC).