Identity Governance and Digital Transformation of the University Document Ecosystem: A Socio-Technical Model with Microsoft Entra and Five OBS Domains

Abstract

This article evaluates the sociotechnical governance of SharePoint Online and Microsoft Entra at PUCE Esmeraldas, integrating five OBS domains: strategy, digital transformation, operations, information and analytics, and governance/GRC. The corpus covers 172 days of evidence (March 4–August 22, 2026) and separates operational controls from unproven capabilities. Information architecture reaches level 3; automation is in transition 2→3; identity and access, GRC, and observability reach level 2; the conservative global level is 2. The document details 18 hubs, 24 sites, registered application authentication, metrics reduced from 180 to 5 minutes, and an access BPMN process. Conditional Access, PIM, Access Reviews, Lifecycle Workflows, and Purview remain NR until SKU availability and configuration export are secured. The result is a governed roadmap connecting value, security, adoption, and learning without mistaking licensable capabilities for actual results.