By streamling provisioning with Identity Manager, we can roll out 40 applications per week to employees instead of two.
Ensuring the efficiency, consistency, and security of identity and access management is businesscritical for R-IT’s customers, which are based in Austria and several countries across Central and Eastern Europe. R-IT develops and operates four instances of Identity Manager from One Identity to support close to 80,000 technology users.
Identity Manager helps take care of the access rights associated with over 500 applications attached to Active Directory, including nine HR systems that are the main data sources for the solution. More than 300 business tenants depend on these technologies. Twice a year, R-IT uses Identity Manager to report on close to 200,000 attestation cases.
Alexander Reithoffer, Lead Consultant for Identity Manager at R-IT, says, “Identity Manager helps us efficiently take the right steps at the right time, grant users access when they need it and always remain auditable. Without it, specialized teams would use giant spreadsheets to manage identity and access management.” The solution’s versatility is key for R-IT customers. “You can easily connect Identity Manager with applications through out-of-the-box integrations or customize it,” Reithoffer adds. “Having both options is perfect for our complex technology environment.”
In collaboration with application owners, R-IT augmented the service catalog in Identity Manager with permissions objects, which define access rules, persons accountable and approval workflows. During application provisioning, users and IT team members can import self-service “shop items” based on permissions objects. Lucas Pachler, solution architect at R-IT, says, “By streamlining provisioning with Identity Manager, we can roll out 40 applications per week to employees instead of two.” Reithoffer adds, “It used to require a full day to work with IT managers and fully provision users. Identity Manager automation reduced this process to roughly 30 minutes.”
Another automation with Identity Manager makes developers lives’ easier while maintaining application security. Developers no longer need to submit a ticket for R-IT to create a service account and provide access. Instead, they can define their requirements, present a request to Identity Manager and promptly receive application access rights from the solution’s service catalog. “Identity Manager helps us provision developers faster with the appropriate permissions so they can continue their work without delay,” says Pachler.
Our customers from the banking sector, Raiffeisenlandesbank Niederösterreich-Wien AG (RLB) and Raiffeisen Bank International AG (RBI), are subject to internal and external compliance audits, including a highly consequential, detailed review by the Austrian National Bank, which acts on behalf of the European Central Bank. Identity Manager enables comprehensive visibility and documentation to show auditors when and why business groups granted, revoked, or modified employees’ access rights and the permissions associated with specific applications. “With Identity Manager, we can provide auditors with complete tracking and assurance of our regulatory compliance when it comes to access rights,” says Reithoffer. “Our colleagues are highly appreciative that they can rely on this service from R-IT.”