Heidelberg Materials takes the complexity out of IGA with One Identity

RADOSLAW MORAWSKI: My name is Radoslaw Morawski. I'm working as a product owner for workplace identity, and access at Heidelberg Materials. In the past, we had a really complex environment, and it was really hard to have any kind of the automation and standardization behind. And even simple provisioning and deprovisioning accounts were really painful. Security concerns what we used to have-- it was related to the environment. We had a complex one globally. Each country differently built their own processes. The automation and the standardization was a problem. Even the simple provisioning and deprovisioning accounts was differently done in each country. In the past, you had to do that manually and cooperate somehow between the SAP team, the HR team, and our team and keep or trying to keep the data on enough level of the consistency, and this is also a really challenge. And we chose the One Identity because of the few reasons-- one of them was the possibility to maintain account lifecycle. The second one-- to have processes and behind the processes the automation and standardization possibilities, and what is also very important for us-- the compliance support for the GDPR and the ISO. The benefits for us-- of course, if you have perfect processes in place, this is more than half of the success, I would say. But if you have them, your life is much easier with the automation in the standardization and with the tool like the One Identity Manager. And also, we are prepared for the security increased because right now we are able to maintain our accounts in the correct way because of the best practices, et cetera. We use SAP, and in the past, the provisioning of the accounts, for instance, we created an account separately into AD, and there was a separate team who handled the SAP. But when we have the M right now, then we can do that without any influence of the SAP team. And we have a cooperation really good with the SAP team, especially what I have mentioned already. The quality of the data is really important there. The creation and the provisioning and the deprovisioning accounts is really fast, and it's not only for the SAP, but we have plenty of the target systems. And we count only on the one source of truth. Then right now it's-- when the data are good quality and it put in our HR tool, then it's spread within minutes, I would say. The advice what I would give to them-- I think two of them. The first one-- processes. Please keep and maintain your processes because, as I mentioned, this is not only 5%, 10%, 15% of the success. But if you have a really good processes in the background, then your automation and standardization is working like a charm and less problems less troubleshooting, but the tool is working as it's supposed to. And the second thing would be to maintain and keep alive the account lifecycle. This is really, really important from the security point of view. Don't keep old accounts alive.