A major energy company with over 4000 employees was compelled to replace a discontinued IAM product and existing time-consuming manual functionality (onboarding/off-boarding), to provide a point in time accurate view of the user and meet regulatory compliance.
The program of work covered these main areas of activity:
- Integrated with mature, heavily customized SAP HCM (HR) by leveraging the SAP Target System connector, heavily modifying the pre-built OOTB dataset/workflows.
- Fully automated the existing on-boarding/off-boarding processes, provisioning birthright assignments in AD (multiple domains), Exchange Hybrid, and other proprietary business applications.
- Integrated 1IM with cloud based ITSM solution (SNow), both provisioning/de-provision user access (Web-Services), as well as developing a custom interface (C#/PowerShell), allowing 1IM to provision account/access to internal system, based on requests from the SNow service catalog.
- Designed and built monthly/bi-yearly business and regulatory attestation policies, across eight target systems/ platforms with specific roles/ entitlements. This automated and simplified the UAR process and bought the business into compliance.
- Developed custom, highly complex, reports, using the 1IM relational database, to identify missing/non-compliant access & accounts), across all platforms/applications (Active Directory/Azure – standard, privileged & service accounts, Exchange (user and shared mailboxes), multiple SAP instances, Skype For Business/Teams, Snow & custom-built business applications, integrated with1IM.
By extending automation attestation processes the company reduced management time for IAM processes, addressed business and regulatory functionality, mitigated risk and secured an accurate view of the user.