About the Customer
Client is an Oil and Gas major, and one of the biggest companies
globally. Currently
End User Access Management is primarily a manual process distributed
across all
Businesses, ISP suppliers, KAS suppliers and End User Access Management
Teams. A combination of factors has contributed to this process failing
to meet
business service level expectations and mandatory compliance
obligations. The
project was established to design and implement common processes and
tools to
provide more effective control and improve process efficiency. The tools
will
automate many of the current manual work activities. EUAM to the
Business-Critical
application portfolio is the targeted initial scope for the solution. To
implement this
one of the leading IGA tool is used but the tool needs data to be
reconciled from the
onboarded applications.
What we did
- Design a data model which has all the required attributes for user data model, entitlements and privileges.
- Create the framework which can be used by adding subscribers through configuration changes and SQL queries.
- The framework was able to connect with different sources like SQL, Oracle, Active Directory, SYBASE, Flat Files and Excel.
- Create ETL jobs to stage the data and convert them to an unified data model.
- Reconcile with identity management system which is the single source of truth.
- Create Control M Jobs and schedule them as per business logic and requirement.
- Integration with Liaison MFT for SaaS application.
- Error handling and effective monitoring to enable support team for better operations.
Impact
- Initial validation of users, roles, user-role mapping as part of onboarding of applications.
- Users got the access that they requested and got approval for.
- Movers and leavers got de-provisioned from the application as appropriate.
- Data clean-up could be relevant in case there are data quality issues.
- Control Reports and Analytics Reports has the latest data which enables the control operators to take the right decision.