Evidence over slogans

What stands out

A large bank engaged Identigy to deliver a production identity-governance (IGA) system on Oracle Identity Manager. Before the project, access was managed manually by each system's administrators, with no enterprise role model and no centralized password management. On OIM the team implemented an automated account lifecycle (joiner/mover/leaver), access requests with multi-step approval routing, audit and periodic certification, and detection of out-of-band changes with automatic rollback; the role model was built from the ground up through statistical role mining on a trusted HR source. Several target systems were brought under governance — the corporate directory and mail, the information-analytics system and the document-management system — several via custom connectors. The system passed acceptance testing and entered production (thousands of users across a branch network).

What stands out

A global research-driven pharmaceutical group engaged Identigy to simplify a sprawling IT-role model on its existing IGA platform and extend an end-to-end access process aligned to pharmaceutical industry regulation. The team designed a structured role model — business roles with characteristic sub-roles and rule-based birthright assignment — and built a request-to-grant flow across self-service, governance and learning systems, with multi-step approvals and e-signature. An access-after-training control grants regulated roles only once the mandatory curriculum is complete, with daily checks and roll-back on non-completion; joiner/mover/leaver events and periodic recertification with escalation were automated.

What stands out

EU public-sector identity governance programme for a national health insurance authority. Delivered via Identigy's international hub into a compliance-driven public-sector perimeter; scope covers identity lifecycle, role model and the audit reporting expected from a national health insurance fund.

What stands out

EU public-sector identity governance programme for a national tax authority under the Ministry of Finance. Identity-lifecycle automation and access governance with the compliance and audit posture appropriate for an EU government agency. Delivered via Identigy's international hub.

What stands out

A global Protection & Indemnity (P&I) insurer in the marine and energy sector engaged Identigy to implement an enterprise identity governance and administration (IGA) programme. The initiative centred on a scalable IGA platform to automate core identity lifecycle processes—onboarding, role changes, and offboarding—across a distributed international environment. A unified role model, aligned with both IT and business functions, was established using the corporate ERP as the authoritative source for organisational structure and role definitions. Governance was expanded to include not only employees but also external consultants and service accounts, strengthening compliance and control. Access certification campaigns and Segregation of Duties (SoD) policies were institutionalised to support regulatory requirements. The solution integrated with legacy systems and applications across the global perimeter, enabling consistent enforcement of parameterised access rights. The multi-year programme delivered sustained improvements in access transparency, operational efficiency, and regulatory alignment.

What stands out

In the oil & gas sector, a critical infrastructure operator undertook the modernization of its identity governance and access management (IGA) environment, transitioning from an established enterprise IAM platform to a custom-built IGA solution based on the OpenIDM/OpenICF framework. The initiative spanned multiple operational entities within the group, including a major gas transmission and maintenance facility. The project involved decommissioning a legacy Oracle Identity Manager deployment and implementing a unified access-management contour compliant with stringent regulatory requirements for critical information infrastructure. Key deliverables included the design and rollout of a policy-driven role-management system (PUR/RBAC), development of custom connectors to core business systems—such as 1C (HR, payroll, project accounting), Active Directory, and corporate email—and the orchestration of end-to-end identity lifecycle processes: onboarding, transfers, leave management, offboarding, and role-based access requests with dynamic approval workflows. Integration and performance validation were conducted via automated testing tools, confirming system stability under load. The solution was formally accepted by stakeholders in early 2020, with full handover completed under a broader information security modernization program. The platform, while derived from open-source foundations, was tailored to meet specific compliance and operational resilience standards, marking its first deployment at scale within the organization’s portfolio.

What stands out

A large retail bank engaged Identigy to deliver a production IGA platform on Evolveum MidPoint (open-source), replacing a legacy in-house, ERP-based access solution in which onboarding each new target system was slow and costly. On MidPoint the team implemented an automated account lifecycle (joiner/mover/leaver), access audit and periodic certification, and segregation-of-duties control, and rebuilt the role model from the ground up — roles assigned by conditions such as an employee's position level. Several target systems were brought under governance, including the core banking system, card processing, the corporate directory and mail, and the HR source. The complex role model surfaced performance challenges resolved through joint engineering with the platform vendor. The system runs in production (thousands of users) with ongoing development and third-line support.

What stands out

A multi-business-unit mining group, then in an active phase of mergers and acquisitions, engaged Identigy for an access-governance audit and target-model design. Across a heterogeneous IT landscape with inconsistent practices and no centralized access governance, the team surveyed the group's core systems and designed the target access-management process from the ground up: a three-tier role model (RBAC) on a «location × organizational-structure» poly-hierarchy, anchored on the trusted HR source and spanning the directory, mail, ERP and HR systems. Deliverables included the access-governance concept, policy, regulations and statute, a role-formation and system-categorization methodology, and a vendor-neutral methodology for selecting an access-governance system — a ready, agreed foundation handed over ahead of any automation while the group restructured.

What stands out

A multinational organization in the natural resources sector undertook the modernization of its identity governance framework, transitioning from a legacy commercial IGA system to a scalable, open-source platform. The environment encompasses a global directory, multiple subsidiary domains, and integrations with HR, ERP, email, and critical line-of-business applications. The initiative focused on streamlining a fragmented landscape of custom connectors by consolidating them into a standardized set of integration types. A new asynchronous message-broker-based integration layer was implemented to enhance reliability, scalability, and operational visibility. During the cutover phase, both platforms operated in parallel to ensure uninterrupted service delivery and mitigate migration risks. The updated architecture supports centralized policy enforcement, improves audit readiness, and aligns with evolving regulatory requirements for access governance, enabling greater agility and reduced long-term operational complexity across the enterprise identity landscape.

What stands out

A telecommunications retail chain operating a nationwide footprint with a large, mobile workforce required enhancements to its in-production enterprise IAM platform, built on an Oracle-based identity management system. The platform governs access to critical resources including directory services, corporate communications, a 1C retail sales environment, and point-of-sale workstations, with SAP HR serving as the authoritative source for identity data. The existing architecture, originally designed by the same team engaged for the upgrade, was extended to improve reliability and automation across the identity lifecycle. Key improvements included a refactored 1C integration that isolated account provisioning logic, enforced identity consistency through personnel number and full name validation, introduced duplicate account detection with auto-remediation, and ensured synchronized name updates across all connected systems. Credential management for retail workstations was automated by capturing password changes in 1C and propagating them via a secure web service, with account recreation during inter-store transfers preserving existing credentials. Prior custom integrations with corporate email, a service bus, and a service management platform were also part of the evolved architecture. All deliverables were formally implemented and accepted.

What stands out

The operator in the telecommunications sector upgraded its corporate access‑management environment to improve compliance and operational efficiency. Using an enterprise identity‑and‑access‑management platform, the project automated onboarding, role changes and off‑boarding and introduced role‑based access control for six core systems, including directory services, corporate communications, billing and accounting applications. A custom integration component provided governed provisioning for the accounting suite while preserving the legal independence of the local entity. The solution supports a small user base, meets regional data‑residency and access‑oversight regulations, and was accepted after formal sign‑off, delivering centralized control without compromising jurisdictional requirements.

What stands out

A large telecom operator engaged Identigy, as a technical subcontractor, to implement automated access-rights management and segregation-of-duties (SoD) control on Oracle Application Access Controls Governor (AACG) over a corporate Oracle e-Business Suite R12 ERP (multiple functional modules, from general ledger to payroll). The driver was regulatory SoD-compliance: SoD control had been manual, with no automated conflict analysis and no management of compensating controls. The team delivered what-if SoD analysis on every access request, automatic approval-chain build-up, a full lifecycle for the compensating-controls catalogue, user- and role-level control, and consolidated SoD-risk reporting for internal control and external auditors. The platform's stock functionality was extended with middleware on the customer's ITSM platform (two-way integration) and a deeply reworked ERP connector with custom filters eliminating false positives. The solution passed multiple test cycles plus load testing and entered production.

What stands out

A public-sector organization in the social services sector, operating a large workforce across a nationwide network of regional offices and managing significant volumes of personal data, undertook the rollout of an enterprise single-sign-on and centralized account management system. Identigy supported the initiative—acting as a technical subcontractor to the prime contractor—by leading the regional deployment, integration of line-of-business subsystems, and transition to trial operations. The solution leveraged a unified authorization and end-to-end authentication platform based on an enterprise IAM system, supported by regional authentication centers, and a hierarchical identity provisioning layer synchronizing accounts from an HR system built on a 1C platform into a corporate directory service. Prior to the project, access provisioning was manual, relying on paper-based approvals and resulting in prolonged fulfillment cycles. The team deployed regional authentication components, integrated business applications with single sign-on, automated the full account lifecycle—including onboarding, transfers, name changes and offboarding—conducted readiness assessments for each regional office, trained local personnel, and facilitated operational handover. The rollout was completed successfully, fully accepted by the customer and delivered on schedule.

What stands out

A professional-services firm in a highly regulated sector required a segregated identity and access management environment to ensure control and compliance. The solution implemented an open-source technology stack comprising an enterprise SSO platform, a corporate identity governance system, and a centralized directory service. This independent IAM environment supports critical business applications, enabling seamless single sign-on, automated user lifecycle management, and recurring access reviews. Employee data is synchronized from a trusted HR source, while a self-service integration framework allows quick onboarding of new applications. Deployed using Agile CI/CD practices across multiple environments, the first application was secured within four weeks. The approach delivered a fully auditable, license-free access management layer, ensuring operational autonomy, regulatory alignment, and long-term vendor neutrality at scale.

What stands out

A financial institution in the banking sector faced growing operational and regulatory risks due to reliance on foreign identity management platforms, exacerbated by geopolitical shifts and withdrawal of international vendors from the local market. With a large workforce and complex HR processes—including concurrent employment and multi-record reconciliation—the organization required a resilient, locally sustainable IAM solution. The legacy environment, consisting of two enterprise IDM systems, necessitated strategic replacement of the primary platform to ensure continuity, compliance, and independence from external licensing constraints. Identigy implemented an open-source identity management platform across three CI/CD-aligned environments, delivering a fully automated account lifecycle covering joiner, mover, leaver, and special employment scenarios such as maternity leave and emergency access blocks. Key integrations included a high-performance email system connector meeting strict service levels and a re-architected HR feed capable of handling complex personnel data harmonization. A self-service portal and clear separation of duties across the remaining IDM systems enabled a smooth parallel run and transition. The new architecture significantly reduced account provisioning time in the corporate directory, with sustained performance over several years of post-go-live support and incremental enhancements.

What stands out

A transport sector organization sought to modernize its fragmented, manual access request procedures across a complex, multi-domain IT landscape. To address this, a custom identity governance and administration solution was developed using an open-source platform based on the OpenIDM/OpenICF framework, supported by a PostgreSQL database and integrated workflow engine. The system enabled automated user lifecycle management—including onboarding, role changes, transfers and offboarding—along with dynamic approval workflows, a unified cross-system role model, self-service access requests and periodic access recertification for compliance. Custom integration connectors were built to synchronize with directory services, email platforms, an enterprise service bus, IT service management tools and HR systems. The solution was successfully piloted in a defined operational zone, meeting all delivery milestones and achieving formal acceptance. Despite the pilot’s technical success, the organization did not proceed with a full-scale enterprise deployment. The project adhered to sector-specific regulatory requirements for access control and auditability throughout.

What stands out

An industrial holding implemented a group-wide identity governance platform to enforce zero-trust and least-privilege access across multiple legal entities and IT systems. The initiative began with synchronizing identity data from a legacy HR system to a modern enterprise HR platform, aligning the identity cut-over with a critical payroll transition. This ensured accurate, automated provisioning based on verified workforce events. Subsequent phases expanded integration to core platforms including directory services, email, CRM, content management, and access governance systems. The program advanced the organization’s security posture through continuous development of role-based access controls, approval workflows, and governance of non-human identities, particularly service accounts. Operating under strict regulatory requirements, the solution strengthened compliance, reduced access risk, and improved operational scalability across the enterprise’s evolving digital landscape.

What stands out

A financial institution with a large identity population required improved compliance with sector-specific regulations and more efficient identity lifecycle management. To address this, an enterprise identity governance platform was implemented to centralize HR data sources, establish a unified identity model, and automate critical joiner-mover-leaver processes. The solution enabled systematic provisioning of access across core systems, including a mainframe environment, corporate directory, and key banking applications. Role-based access controls and embedded approval workflows were integrated with employment status logic to ensure appropriate access assignment. Where full automation was not viable, streamlined manual interventions were introduced to reduce operational overhead. Over a two-and-a-half-year implementation period, the initiative significantly reduced manual processes, improved accuracy in access provisioning, and strengthened audit readiness. The enhanced governance framework provided greater visibility into access rights and compliance posture across the organization’s IT landscape.

What stands out

A financial institution in the banking sector operated a large-scale identity and access management environment serving a substantial workforce, managing high volumes of access requests through a centralized enterprise IAM platform. The solution supported a structured role-based access control model, automated directory provisioning, and integrated with a heterogeneous landscape including core banking, customer relationship, treasury, email, IT service management, and security systems. Over multiple years, under a direct support agreement, comprehensive technical oversight was delivered, encompassing defect resolution, deployment of fixes, administration of identity lifecycle processes under strict SLAs, routine audits for compliance, reconciliation of user entitlements, and evolution of integration components within the existing architecture. Services included on-site presence and ensured sustained operational stability, meeting regulatory requirements for data confidentiality and integrity. The environment remained resilient and fully functional throughout the engagement, with all deliverables accepted without dispute.

What stands out

A global energy enterprise managing access for over 5,000 identities across multiple regional facilities partnered to modernize its legacy identity governance environment. The initiative focused on upgrading a highly customized enterprise IAM platform to its latest release, extending core functionality beyond out-of-the-box capabilities, and implementing DevOps practices to streamline deployment cycles. The solution included continuous operational support and a concurrent migration to the updated platform version. A centralized role model, driven by HR data, enables dynamic access provisioning across a distributed infrastructure. Automated lifecycle management covers employees, contractors, and service accounts, with consistent recertification workflows triggered by role or location changes and continuous drift detection across ten integrated systems. The architecture ensures compliance with sector-specific regulatory requirements while improving access accuracy and operational resilience.

What stands out

A multinational insurance organization with a broad network of agents and partners—spanning tens of thousands of identities—underwent a comprehensive identity management transformation supported by Identigy. The engagement began with the implementation of an enterprise IGA platform, enabling end-to-end account lifecycle management, business-driven role definitions for branch and partner channels, integration with managed systems, an ERP-based HR source, and cross-domain Active Directory environments, alongside a self-service access request portal. Subsequently, Identigy led a proof-of-concept and migration to an open-source identity governance solution, transitioning from a proprietary system to achieve greater vendor independence and internal development agility. Ongoing support now includes technical consulting, custom development, and enhancement of the platform’s object model, connectors, role architecture, access certification workflows, segregation-of-duties controls, user interface adaptations, reporting capabilities, and mitigation of product-level limitations through tailored engineering solutions. The initiative aligns with global regulatory requirements for access governance and auditability in the financial services sector.

What stands out

A financial sector retail banking institution managed a large-scale, multi-branch and agent-based operation requiring a resilient identity and access management (IAM) framework to support a diverse population of employees, agents and digital users. Facing stringent regulatory requirements and high-volume transaction demands, the organization implemented an enterprise IAM platform built on Oracle technology, later upgraded to Oracle 12c, ensuring long-term scalability and compliance. A core internal team led the architecture and evolution of the system over several years, while integration support rotated across multiple vendors due to shifting budget cycles. The solution featured a hierarchical role model for identity lifecycle management, automated provisioning to directories, audit-ready attestation processes, and a geo-distributed, highly available directory with active-passive data center replication. Access control was strengthened through SSO, directory services and a custom two-factor authentication layer with biometric verification, linked to real-time fraud monitoring. The platform seamlessly supported mission-critical operations such as customer onboarding, point-of-sale systems and CRM workflows, operating continuously under heavy load. Designed for resilience and regulatory alignment, the IAM system remained in production throughout its lifecycle, enabling secure, scalable access across the institution’s front-office functions.