How Nucleus Networks standardized Conditional Access across 200+ tenants

200+

M365 tenants

1

Conditional Access standard

0

Manual audits or configs

Ready to get started?

Book a demo

Summary

Nucleus Networks, a Canadian MSP with offices in Vancouver, Victoria, Calgary and Toronto, manages more than 200 Microsoft 365 tenants. Before inforcer, the team configured Conditional Access tenant by tenant and ran ongoing manual audits to catch drift. With inforcer, Nucleus Networks built one standardized Conditional Access baseline, applied it across all 200-plus tenants, and replaced manual audits with automatic drift detection. CTO Karl Fulljames says work that used to chew up hours of audits and manual configuration now happens in minutes.

Challenge

Ensuring consistent standards across 200+ M365 tenants was time consuming
Managing Conditional Access policies required tenant-by-tenant configuration
Maintaining alignment required ongoing manual audits

Solution

Used inforcer to create a standardized baseline of security policies and settings
Applied that baseline across tenants to ensure consistent Conditional Access policies
Replaced manual audits with automatic drift detection

Partner

Nucleus Networks

Location

Offices in Vancouver, Victoria, Calgary, and Toronto

inforcer Features Used

Standardized Baselines
Tenant Alignment
Policy Deployment
Drift Monitoring

The challenge: Conditional Access management was a real grind

Customers count on Nucleus Networks to keep their environments secure and their Microsoft 365 policies in check. But with more than 200 client environments to look after, the team’s approach to policy management was holding them back.

To ensure Conditional Access policies and other Microsoft 365 security settings were applied and maintained consistently, techs had to configure and review each tenant individually. It was a tedious and time-consuming process just to keep policies aligned.

And if a change occurred because of a Microsoft update or one-off fix, it was difficult to stay ahead of policy drift without endless manual audits.

Nucleus Networks wanted to manage Conditional Access and M365 security like they did workstation patching: Define a standard, apply it, and make sure it sticks.

In other words, set it and forget it.

The solution: define a standard once and keep Conditional Access consistent across tenants

With inforcer, Nucleus Networks can set and forget Microsoft 365 policy management.

Instead of logging into each tenant and configuring policies one by one, the team can create baselines for their ideal security configuration, including Conditional Access policies, and roll the standards out consistently across every environment they manage.

Having a consistent baseline in place also makes it easier for techs to ensure policies stay aligned and manage any potential drift.

As new configurations are introduced or adjustments are made, the team can quickly see what changed and whether it was approved and intentional. From there, they can decide to roll the change back to the baseline or push it out across other tenants.

The results: Better security. Better client conversations.

inforcer doesn’t just help Nucleus Networks easily ensure each tenant is secured and maintained. It also gives the team a consistent way to track, measure, and communicate their value.

Instead of relying on the notes from manual reviews, inforcer’s reports make it easy for them to see (and prove) how each tenant aligns to their defined security baseline.

Nucleus uses the reports to build customized security scorecards that show how a current or potential client's Microsoft policy settings stack up against common regulations and compliance frameworks.

On sales calls, the scorecards help Nucleus show exactly where a prospect’s environment falls short and what needs to be fixed. During QBRs, those same scorecards show how the team has kept client tenants aligned and ahead of any potential drift.

About Nucleus

Nucleus Networks is a Canada-based managed service provider that helps clients use IT to supercharge their businesses.

They go beyond day-to-day support, working closely with clients to improve security and performance, and support their long-term goals.

About inforcer

We help MSPs turn Microsoft 365 policy management into a scalable security service.

Microsoft is always updating its security controls, policies, and features. Just because a tenant was configured correctly last month doesn’t mean it's secure today.

We make it easy to catch and correct potential drift across all of your clients before it becomes a security or compliance liability.

Scope & Limitation Statement

For Nucleus Networks, inforcer covers standardized Conditional Access baseline creation and deployment across 200-plus Microsoft 365 tenants, plus tenant backups, change alerts and automated policy deployment for M365/Entra management. It replaces manual, tenant-by-tenant audits with automatic drift detection. The page does not name a specific compliance framework, publish a rollout timeframe, or state seat or endpoint counts, and results described are specific to Nucleus Networks, not guaranteed for every MSP.

Explore more inforcer success stories

Explore how Cloudbox reduced Microsoft 365 management time by 80% with inforcer.

Read success story
Explore how Entech created, productized, and sold a new Microsoft 365 offering.

Read success story
Explore how Summit Technology simplified Microsoft 365 management.

Read success story

Frequently Asked Questions

How many Microsoft 365 tenants does Nucleus Networks manage?

Nucleus Networks manages more than 200 Microsoft 365 tenants. The Canada-based MSP, with offices in Vancouver, Victoria, Calgary and Toronto, standardized Conditional Access across all of them using one baseline built and deployed in inforcer, replacing the tenant-by-tenant configuration it relied on before.

How did Nucleus Networks manage Conditional Access before inforcer?

Before inforcer, Nucleus Networks configured Conditional Access tenant by tenant across its 200-plus Microsoft 365 environments, then ran ongoing manual audits to check nothing had drifted. CTO Karl Fulljames says that process chewed up hours of audits and manual configuration for every review.

What replaced manual audits at Nucleus Networks?

inforcer's automatic drift detection replaced manual audits at Nucleus Networks. Instead of tenant-by-tenant reviews to catch configuration changes, the MSP now relies on a standardized Conditional Access baseline applied across all 200-plus tenants, with change alerts and policy deployments running automatically.

What does Nucleus Networks use inforcer's security scorecards for?

Nucleus Networks uses inforcer-generated security scorecards to show current or prospective clients how their Microsoft 365 policy settings compare against common regulations and compliance frameworks. CTO Karl Fulljames says this gives the MSP an edge in prospect conversations and lets the team spin up one-off audits for new onboardings quickly.

What did Nucleus Networks automate with inforcer beyond Conditional Access?

Beyond Conditional Access, Nucleus Networks automated tenant backups, change alerts and policy deployment with inforcer. CTO Karl Fulljames describes it as taking the grind and human error out of M365/Entra management, and says it lets the team sleep better at night knowing security gaps that existed before no longer do.

365 Manager

inforcer TDR

Microsoft 365 policy coverage

Community

Resources

Login

How Nucleus Networks standardized Conditional Access across 200+ tenants

200+

1