Case Study - Financial services and banking company

Challenge

The customer initially approached IDMWORKS with no formal identity management program in place.  All provisioning was manual and the processes were not centralized.  Accounts and passwords were managed individually by application teams and each application had its own unique credentials.  Frequent acquisitions caused business interruption with the manual processes in place.

Solution

IDMWORKS evaluated the customers processes and requirements and helped select SailPoint IdentityIQ and Pingfederate as the IGA and Access Management solutions.  IDMWORKS implemented SailPoint IdentityIQ in a greenfield environment connecting various applications and centralizing and standardizing lifecycle events for users onboarding, birthright provisioning, and user offboarding.  Deployment of the Non-Employee Identity Suite from IDMWORKS enabled the customer to manage contractors, vendors, and outside auditors without needing to integrate the populations fully into the enterprise HR system. IDMWORKS then deployed Pingfederate as the enterprise Single-Sign On platform protecting over 50+ applications with SSO and MFA.

Results

Deployment of SailPoint IdentityIQ and Pingfederate served as the basis for the IAM program that continues to grow in the organization.  Standardization and automation of lifecycle events reduced the user onboarding time and increased compliance with automation of the Leaver workflow.  Access Certifications within SailPoint IdentityIQ allowed the customer to comply with SOX audits, simplifying the quarterly access review process required for critical systems.

Enterprise SSO improved the user experience by consolidating to a single and more secure credential for integrated applications.  SSO also reduced the helpdesk calls significantly for password resets of various applications.  Implementation of MFA helped reduce the risk of compromised credentials and ensure only valid and known users were logging into corporate systems.

Software Products

• SailPoint IdentityIQ
• Pingfederate
• IDMWORKS Non-Employee Identity Suite