The Challenge
A state university system with 12 campuses and 80,000 users was up for MFA renewal with their incumbent vendor. The incumbent had been in place for five years and had strong relationships with the decentralized IT teams at each campus. Displacing them required winning not just the central IT organization but buy-in from campus IT directors who feared disruption.
The Approach
I took a 12-month approach, starting with relationship building at two key campuses where I had existing contacts. I ran pilot projects on those campuses demonstrating superior user experience and reduced help desk burden. The results from those pilots — 60% reduction in authentication-related support tickets and 94% student satisfaction — became my ammunition for the broader system evaluation.
For the central CISO, I focused on FERPA compliance and the risk of credential-based access to student records. I compiled a dossier of universities that had faced FERPA enforcement actions due to inadequate authentication controls and showed how phishing-resistant MFA would eliminate that risk category entirely.
The Objections
Campus IT directors worried about migration disruption during the academic year. I proposed a phased rollout aligned with semester breaks — each campus would migrate during their winter or summer break, ensuring zero disruption to students and faculty. I also offered dedicated migration support teams for each campus to address their unique configurations.
The Result
The university system selected us for a $1.6M, five-year contract covering all 12 campuses. The phased migration completed on schedule over two semester breaks with no disruption to academic operations. The system became our largest education reference customer.
Key Takeaway
Large displacement deals in decentralized organizations require a ground-up strategy. Winning pilot campuses first creates internal proof points that are far more persuasive than any external case study. Aligning migration timelines with the customer's operational calendar shows you understand their world.
Get new posts in your inbox
No noise. Tactical field notes when something worth sharing comes up.