Joiner/Mover/Leaver

The "Joiner/Mover/Leaver" processes are about recruiting employees, changing the department or leaving the company. It is necessary to ensure that they receive the appropriate authorizations they need for their tasks; only these. With an identity management system, you can couple certain roles to HR processes and automate this process accordingly. Manual intervention for special permissions can be provided here.

Auditing

When administering user accounts and access rights, it must be possible to understand which employee has carried out the respective action. This requires an unchangeable audit log. Of course, a GDPR-compliant retention policy must also be determined here.

Provisioning

If an employee gets rights for an application, the master data of the user must be transmitted to the application. The user is created in the application. This process is called commissioning. If an employee loses access to an application, the user must be removed or at least disabled accordingly. In addition to security reasons, GDPR founders are also involved. Technically, the SCIM standard should be mentioned here, see: However, individual solutions are often also implemented.

Segregation of Duty

From a company perspective, it is important that some access rights are mutually exclusive. Abuse by employees can be systematically prevented. Example: An employee should not be able to initiate orders and make payments at the same time. He could dispose of money like that without anyone coming. With an identity management system, you can formulate these rules and technically ensure them. The assignment of certain roles to one and the same employee is then no longer possible.

Uniform safety standards

Since safety-relevant processes are implemented centrally with an identity management system, it is automatically ensured that they apply to all applications. Without identity management system, you would have to program them individually in each application and monitor compliance with them regularly. The time and cost savings allow you to focus on the continuous improvement in the identity management system.