Evidence over slogans

What stands out

A bank engaged Identigy to deliver a production identity-governance (IGA) system on Oracle Identity Manager. Before the project, access was managed manually by each system's administrators, with no enterprise role model and no centralized password management. On OIM the team implemented an automated account lifecycle (joiner/mover/leaver), access requests with multi-step approval routing, audit and periodic certification, and detection of out-of-band changes with automatic rollback; the role model was built from the ground up through statistical role mining on a trusted HR source. Four target systems were brought under governance — the corporate directory and mail, the information-analytics system and the document-management system — several via custom connectors. The system passed acceptance testing and entered production (across a branch network).

What stands out

A global research-driven pharmaceutical group engaged Identigy to simplify a sprawling IT-role model on its existing IGA platform and extend an end-to-end access process aligned to industry regulation. The team designed a structured role model — business roles with characteristic sub-roles and rule-based birthright assignment — and built a request-to-grant flow across self-service, governance and learning systems, with multi-step approvals and e-signature. An access-after-training control grants regulated roles only once the mandatory curriculum is complete, with daily checks and roll-back on non-completion; joiner/mover/leaver events and periodic recertification with escalation were automated.

What stands out

EU public-sector identity governance programme for a national health insurance authority. Delivered via Identigy's international hub into a compliance-driven public-sector perimeter; scope covers identity lifecycle, role model and the audit reporting expected from a national health insurance fund.

What stands out

EU public-sector identity governance programme for a national tax authority under the Ministry of Finance. Identity-lifecycle automation and access governance with the compliance and audit posture appropriate for an EU government agency. Delivered via Identigy's international hub.

What stands out

A leading Protection & Indemnity (P&I) marine and energy insurer with a global office network. Identigy delivered an enterprise identity governance (IGA) programme on SailPoint IdentityIQ: automated identity lifecycle (joiner / mover / leaver), an IT- and business-role model, access-certification campaigns and Segregation-of-Duties (SoD) controls. Governance was extended beyond employees to external consultants and service accounts. The corporate ERP served as the source of roles and org structure, and the solution reached legacy systems and applications with parameterised privileges across a distributed international perimeter. The engagement ran over several years.

What stands out

The organization operates in the oil‑and‑gas sector, managing critical‑infrastructure assets. A migration was undertaken from a legacy Oracle Identity Manager solution to an open‑source based Identity Governance and Administration platform built on the OpenIDM/OpenICF stack. The project delivered a role‑management subsystem with RBAC, custom connectors for HR/payroll, accounting, document management, directory and mail systems, and a complete account‑lifecycle workflow covering onboarding, transfers, leave, and off‑boarding with configurable approval routes. The solution passed load and integration testing, was formally accepted without claims, and enabled a standardized, automated access‑management contour across multiple critical sites.

What stands out

A large bank engaged Identigy to deliver a production IGA platform on Evolveum MidPoint (open-source), replacing a legacy in-house, ERP-based access solution in which onboarding each new target system was slow and costly. On MidPoint the team implemented an automated account lifecycle (joiner/mover/leaver), access audit and periodic certification, and segregation-of-duties control, and rebuilt the role model from the ground up — roles assigned by conditions such as an employee's position level. Target systems were brought under governance, including the core banking system, the corporate directory and mail, and the HR source. The complex role model surfaced performance challenges resolved through joint engineering with the platform vendor. The system runs in production with ongoing development and third-line support.

What stands out

A multi-business-unit mining group, then in an active phase of mergers and acquisitions, engaged Identigy for an access-governance audit and target-model design. Across a heterogeneous IT landscape with inconsistent practices and no centralized access governance, the team surveyed the group's core systems and designed the target access-management process from the ground up: a three-tier role model (RBAC) on a «location × organizational-structure» poly-hierarchy, anchored on the trusted HR source and spanning the directory, mail, ERP and HR systems. Deliverables included the access-governance concept, policy, regulations and statute, a role-formation and system-categorization methodology, and a vendor-neutral methodology for selecting an access-governance system — a ready, agreed foundation handed over ahead of any automation while the group restructured.

What stands out

A global enterprise in a regulated industry modernized its identity‑governance framework by migrating from a legacy commercial IGA suite to an open‑source IGA platform. The environment encompassed a worldwide directory, multiple subsidiary domains, HR/ERP, email and core line‑of‑business applications, serving tens of thousands of users. The project unified a large set of custom connectors into a few standardized types and rebuilt the integration layer on an asynchronous message‑broker architecture. Both systems operated in parallel during the cut‑over, guaranteeing uninterrupted service. Post‑migration, the organization achieved streamlined access provisioning, reduced integration complexity, and reinforced compliance with data‑protection and industry regulations.

What stands out

The client operates a large retail network. Its enterprise identity‑and‑access management platform, built on a commercial IAM suite, synchronises a directory service, mail and collaboration systems, a retail ERP and point‑of‑sale workstations, using the corporate HR system as the authoritative source. The engagement refactored the ERP connector to enforce full‑name and personnel‑number consistency, added duplicate‑account detection and automatic name propagation, and automated credential turnover for POS devices through a web‑service workflow. As a result, identity data quality improved, manual provisioning effort was cut dramatically and the retail environment achieved continuous compliance with internal security policies.

What stands out

A mobile network operator modernized its corporate access management infrastructure to strengthen compliance and operational efficiency. The project focused on automating identity lifecycle processes (onboarding, role changes, offboarding) and implementing role-based access control across six critical systems: directory services (Microsoft Active Directory), corporate communications (Exchange, Skype for Business), billing platforms, and enterprise accounting (1C). A custom integration component was developed to ensure seamless access governance for the 1C environment. The solution was built on an enterprise IAM platform, enabling centralized control while maintaining the legal and operational independence of the local entity. A key aspect was governed access provisioning without compromising jurisdictional compliance. The implementation covered a small identity contour and supported alignment with regional regulatory requirements for data residency and access oversight. The system was delivered and accepted under formal sign-off.

What stands out

The retailer operates a large wholesale & retail network with a distributed footprint. Its legacy, custom IDM was replaced by a greenfield enterprise IAM platform built on an open‑source identity‑governance engine. The solution integrates the HR system as the master source, synchronises with Active Directory, a privileged‑access tool and a standards‑based IdP, and automates joiner‑mover‑leaver processes, self‑service password reset, audit logging and periodic access recertification. The MVP was delivered on schedule and is now running in production, managing tens of thousands of identities.

What stands out

A large telecom operator engaged Identigy, as a technical subcontractor, to implement automated access-rights management and segregation-of-duties (SoD) control on an Oracle GRC access-controls platform over a corporate ERP. The driver was regulatory compliance: SoD control had been manual, with no automated conflict analysis and no management of compensating controls. The team delivered what-if SoD analysis on every access request, automatic approval-chain build-up, a full lifecycle for the compensating-controls catalogue, user- and role-level control, and consolidated SoD-risk reporting for internal control and external auditors. The platform's stock functionality was extended with middleware on the customer's ITSM platform (two-way integration) and a deeply reworked ERP connector eliminating false positives. The solution passed three test cycles plus load testing and entered production.

What stands out

A public‑sector organization with a regional office network needed to replace manual, paper‑based access provisioning with an automated, centrally managed identity solution, subject to personal‑data protection regulations. Identigy acted as technical subcontractor to deliver the regional rollout of an enterprise single‑sign‑on and account‑management contour. The core used an enterprise access‑management platform integrated with a hierarchical directory service and provisioned accounts from an HR system. Regional authentication nodes were installed, line‑of‑business applications were onboarded to SSO, and automated lifecycle provisioning (joiner, transfer, leaver, re‑hire) was configured. Training and readiness assessments were performed and the solution was handed over for trial operation, with full acceptance recorded on schedule.

What stands out

A professional‑services organization needed to deploy an independent IAM contour with an autonomous IAM contour. Identigy delivered a vendor‑independent, three‑component open‑source stack: an enterprise SSO solution (Keycloak), an identity‑governance platform (MidPoint) and a directory service (OpenLDAP). The contour supports the organization's priority corporate applications, providing single sign‑on, full account lifecycle automation and periodic access‑certification campaigns. Integration synchronises employee data from a trusted source, and a self‑service onboarding method enables rapid addition of new systems. Deployed via Agile CI/CD across development, test and production environments, the first system was operational in four weeks, giving the firm a sovereign, auditable access‑management layer free of licensing lock‑in.

What stands out

A financial institution in the banking sector faced growing operational and regulatory risks due to reliance on foreign identity management platforms amid shifting market conditions. The organization operated multiple legacy IAM systems, including a primary enterprise IDM and a secondary corporate IGA solution, both subject to licensing dependencies and diminishing vendor support. To achieve long-term sustainability, regulatory compliance, and in-house development autonomy, the bank initiated a strategic replacement with an open-source identity governance platform. Under a direct engagement, a comprehensive implementation was delivered in a compressed timeline, encompassing solution architecture, three CI/CD-aligned environments, and critical custom integrations—including a high-performance HR feed capable of handling complex employment models and a robust Microsoft Exchange connector meeting stringent service levels. The project covered full identity lifecycle management across diverse employment events and introduced a self-service portal, while maintaining interoperability between systems during a phased transition. Key outcome: provisioning latency for Microsoft Active Directory accounts reduced substantially. Ongoing support and incremental enhancements continued over the subsequent years, including resolution of accumulated integration-level anomalies.

What stands out

A large transport company needed to replace a manual, multi‑step access‑request process across a multi‑domain environment. An open‑source identity‑governance and administration platform was built on the OpenIDM/OpenICF stack with a workflow engine and PostgreSQL backend. The solution introduced automated lifecycle handling (joiner, transfer, leave, re‑hire), configurable approval routes, a cross‑system role model, self‑service and audit‑recertification portals, and custom connectors for directory services, mail systems, an enterprise service bus, ITSM and HR data sources. The pilot zone was delivered on schedule and formally accepted; subsequent enterprise‑wide rollout was not pursued.

What stands out

The organization operates in the industrial sector, overseeing a portfolio of multiple entities. To strengthen security posture, it deployed a group‑wide identity‑governance platform that enforces zero‑trust and least‑privilege principles across the enterprise. A core phase migrated the authoritative human‑resources source from a legacy in‑house system to a modern enterprise HR platform, timed with a payroll system go‑live. Subsequent extensions broadened the governance perimeter to include directory services, email, CRM, content‑management and access‑control applications, while continuously refining role‑based models, approval workflows and non‑human identity controls for service accounts. The effort delivered a unified, compliant identity backbone, reduced privileged access risk and streamlined administration across the entire holding.

What stands out

The client operates in the banking sector with a large identity base and must comply with financial‑sector regulations. Identigy was engaged as a subcontractor to automate the enterprise identity‑management service using an identity‑governance platform (SailPoint IdentityIQ). The solution consolidated HR data, built a unified identity model and automated the joiner‑mover‑leaver lifecycle, provisioning accounts to a mainframe environment, directory and core banking applications. Approval workflows and employment‑evaluation logic were embedded, and manual work‑items were reduced where full automation was not feasible. Delivered over a two‑and‑a‑half‑year period, the automation streamlined provisioning, lowered operational effort and enhanced compliance visibility.

What stands out

A commercial bank in the financial services sector, subject to strict banking‑secrecy regulations, operated an identity‑management contour of significant scale. The solution was built on an enterprise IAM platform (Oracle Identity Manager) integrated with a heterogeneous estate of directories, mail, core‑banking, CRM and ITSM systems. Over a multi‑year engagement, the provider delivered continuous technical support, defect remediation, daily lifecycle processing, preventive maintenance, entitlement reconciliation and ongoing integration enhancements. The contour remained reliable throughout the contract period, meeting all service‑level commitments without incident.

What stands out

An energy sector organization managing access for over 5,000 identities across a distributed multi‑site environment partnered with Identigy to modernize its SailPoint IdentityIQ deployment. The effort upgraded the heavily‑customized instance to the latest release, added functional extensions beyond the out‑of‑the‑box capabilities, introduced DevOps tooling and established continuous support while migrating to version 7.3. A dynamic matrix role model sourced from HR now drives automated lifecycle management for employees, contractors and service accounts, supports recertification on inter‑site transfers and provides drift detection across ten managed systems, delivering stronger governance and regulatory compliance.

What stands out

A national health-insurance payer — a central fund with regional branches — runs a single enterprise identity and access management (IAM) platform on SailPoint IdentityIQ, implemented and developed by Identigy as a subcontractor. The platform governs the full lifecycle of four identity types — employees, contractor staff, interns/auditors and system accounts — with automated joiner/mover/leaver, multi-step approval including a dedicated stage for privileged roles, segregation of duties (SoD), periodic recertification of entitlements by data owners, and detection of native (out-of-band) changes. Unified provisioning spans six connected systems, including ERP and the directory service, at a scale of 2,000+ accounts and ~1,100 users — with controlled privileged access to sensitive (medical) data under ISO/IEC 27001 and a first-category state-information-system regime. Implemented 2017–2018, upgraded to a newer platform release in 2021.

What stands out

A national tax administration runs a single identity-governance platform (IGA) on SailPoint IdentityIQ, implemented and developed over several years by Identigy as a subcontractor. The platform governs the full lifecycle of four identity types — employees, interns, external contractors and system accounts — with automated joiner/mover/leaver, access self-service, dual certification of both entitlements and roles with escalation to unit managers, detection of native (out-of-band) access changes, and dormant-access suspension. Unified provisioning spans 30+ systems, including the directory service and the authoritative HR source, at a scale of 3,000+ identities and 50,000+ entitlements — under GDPR, ISO/IEC 27001 and applicable national cybersecurity requirements.

What stands out

The client operates in the insurance sector, employing roughly 9 000 staff and supporting over 17 000 internal users plus 2 200 external agents and partners within its access‑management environment. Identigy delivered a full‑stack identity governance and administration solution, initially implementing a commercial IGA platform to manage account lifecycles, business roles, integration with HR data and Active Directory, and a self‑service portal. A subsequent proof‑of‑concept migrated the core to the open‑source Evolveum MidPoint platform, providing vendor independence and a customizable object model, connectors, role‑based access, segregation‑of‑duties policies, UI tweaks and reporting. Ongoing technical support and consulting ensure continuous compliance with industry regulatory requirements and stable, scalable identity operations.

What stands out

A retail banking entity in the financial sector, operating a vast network of branches and agent locations, managed a complex identity and access management environment supporting a large base of staff, agent and digital-banking identities. The institution required robust IAM capabilities to handle a high agent-operation load, driven by regulatory demands and operational scale. Over a multi-year engagement, a consistent core team designed and maintained an enterprise IAM platform based on Oracle technologies, evolving it through multiple iterations including a full upgrade to Oracle 12c, while contracting shifted among various systems integrators due to internal budgeting structures. The solution encompassed identity lifecycle management via a hierarchical role model, automated directory provisioning, audit and attestation workflows, and a highly available, geo-distributed directory infrastructure with active-passive data center replication. Access management included SSO, directory services, and a custom two-factor authentication mechanism incorporating biometric verification, integrated with real-time fraud detection. The architecture supported critical front-office banking functions, including client onboarding, POS integration, and CRM workflows, operating continuously under high load. The platform was foundational to the bank’s launch, remained in production over the full lifecycle, marking a complete lifecycle delivery.

What stands out

The client operates a large‑scale consumer‑focused digital services platform that aggregates classifieds, food‑delivery, job listings, event tickets and real‑estate offerings. Identigy performed an independent external security assessment of the platform’s web estate, covering the authentication service, payment‑processing component, messaging gateway and advertising‑management interface. The engagement was executed remotely over roughly one month, resulting in a comprehensive findings report that was formally accepted by the client without objections. The assessment reinforced the organization’s compliance posture and highlighted remediation priorities.