Future-proof IAM

In 2014, facing a significant upgrade to its existing large, unwieldly and cumbersome Identity and Access Management (IAM) solution, the university set out to replace it with technology that could operate at enterprise scale, whilst being easy to manage. The university wished to identify a technology partner not only to assist with the initial deployment but also to support the future growth and expansion of the system. This ‘long term view’ was something that the university had not benefited from with the existing IAM technology and was therefore a key requirement for the new solution.

In addition, the solution included ProofID’s Identity, Governance and Administration product (IGA). Widely deployed in UK higher education institutions, IGA provides end-to-end user lifecycle management, including delegated approval workflows, for external users. The solution implemented by ProofID was a deployment of NetIQ Identity Manager, which linked the university’s authoritative sources of identity, the HR and student record systems, with a number of enterprise applications used by staff and students every day, providing automated provisioning and de-provisioning of user accounts.

Neil Morris, Head of Applications (IS) at the university, explains the university’s selection process:

“The proof of concept delivered and presented onsite by ProofID proved to us that NetIQ was the right technology, which met our criteria of a solution that was easy to use, manage and configure but scalable for our needs and plans. ProofID’s long and successful track record in deploying solutions in academia also gave us the confidence that we had the right partner to support us going forward.”

However, it quickly became apparent that the tight integration with the university’s new HR system in parallel with the deployment of Office 365 significantly reduced the amount of time it takes for a new member of staff to be provisioned (from 24 hours to immediate) and removed the heavily manual paper trail. But the deployment of IGA proved to be the biggest unexpected success.

Previously users who didn’t fall into the staff or student categories were provisioned manually in a very labor-intensive process, which was highly prone to errors. This led to a very high risk of users not being de-provisioned correctly and potentially retaining unauthorized access to university systems.

“IGA was a big win for us and has proven to be one the most successful aspects of the whole project,” adds Neil. “We’re now planning to further develop the service by adding additional target applications and make the most of the NetIQ platform to streamline our processes through workflow automation.”

Tom Eggleston, CEO of ProofID adds; “NetIQ Identity Manager has long been proven to be the best of breed provisioning solution for UK academia. In combination with IGA, the solution provides a complete user lifecycle management solution that is tailor made for the identity management challenges faced by the modern university.”