Case Study: Identity Management in Retail
- Headquarters: USA
- Revenue: $4B annual revenue (Fortune 500 company)
- Employees: 22,000
- Size: Owns and operates more than 130 retail grocery stores in Midwest.
- Number of users: Site license (up to 250,000 users)
- Environment: VMS (legacy), Window NT, AIX (Unix)
- Key applications: PeopleSoft HRMS, Novell GroupWise collaboration, help desk, others.
- Compliance: Sarbanes-Oxley (SOX)
- Leverage benefits of compliance
- Advantages of implementing compliance as a process, not an event.
- Easier, continuous, real-time SoD enforcement, consistent and accurate provisioning
- Mitigate risk, reduce vulnerability (from excessive/inappropriate privileges)
- Lower cost and faster/efficient business processes
- Agility: easily respond to change
- Independence: "Don't have to marry our vendor"
- Created connectors to sixteen unique systems in less than 30 days (including IBM 4690 Point of Sale System). Speed of connector development was due to:
- Automated schema discovery: provides instant access to system schema without delay
- Connector architecture: Connectors only require communications unique to target systems. Web services calls are made to reusable code in provisioning engine. Also, connectors can be quickly added to production systems without rebuilding, retesting, or stopping Fischer.
- Fischer's Policy and Business Workflow GUI (no programming or scripting)
- Self-deployed Phase I of IdM in 90 Days
- Automated provisioning for 22,000 users
- Deployment labor: 2.5 FTEs (Project Manager, Business Analyst, Administrator)
- No disruption to the production IT environment
WHY FISCHER WAS SELECTED
- Participants: Fischer and two other vendors selected to perform POCs.
- Determining factors that led to Fischer's selection were:
- Speed to deploy (“time-to-compliance”)
- Self-deployment and self-administration opportunities: maintenance and continuous improvement WITHOUT vendor assistance, i.e., “never-ending price increase scenarios”
- “Product works as advertised”