Standardize and automate end-user provisioning – A practical case study
An international service provider was facing growing challenges: manual, time-consuming user management processes, limited IT resources, and increasing complexity due to cloud and Microsoft 365 integrations.
To drive standardization in user management and reduce the IT department’s workload, the company chose the IDM-Portal from FirstAttribute.
💪 The result: significantly more efficient processes, satisfied users, and a collaborative partnership that has won over the customer.
Since introducing the IDM-Portal, the IT team has significantly reduced errors. The portal guides users through the IAM processes and makes it possible to delegate standard tasks to other departments. Read in our article how the team now completes user setup in a fraction of the original time.
Index
Challenges before the project launch
Before the IDM-Portal was implemented, many IT processes were not standardized and relied heavily on individual administrators. There were many manual processes, and there were no guidelines for creating a user according to a prescribed standard.
The company faced increased service costs. Routine tasks such as user maintenance or managing the absence assistant took up a lot of time. Added to this were dwindling IT staff and the need to securely integrate non-admins into administrative processes as well.
Focus: Standardization and automation
The requirements for a new IAM solution from the customer were clear:
- Rule-based user creation = standardization of user accounts, groups, and objects
- Role and permission concepts to delegate tasks to business departments
- Automation of routine tasks and PowerShell integration
- Ease of use
- Dynamic adaptability to individual needs
- Flexibility for future expansions, such as integration with the HR system and an additional interface to the SAP system
FirstAttribute presented the IDM-Portal to the company in a demo. Our consultants quickly impressed with their high level of IAM expertise and deep understanding of the client’s requirements.
The right solution with the IDM-Portal
Our IAM solution, the IDM-Portal, met all of the customer’s requirements:
-
- Standardization of user creation: Fixed input formats and predefined processes ensure that user accounts are created securely in the IDM-Portal and significantly reduce input errors.
Standardized templates in the IDM-Portal make it easier to create new users.
-
- Comprehensive role-based approach: In the IDM-Portal, access management is precisely tailored based on roles or attributes. Each user is only allowed to view and perform actions that fall within their area of responsibility.
Roles are assigned different permissions. In this case, the “Read” role allows only the reading of selected attributes.
- Automation of routine tasks: Users can initiate tasks in the IDM-Portal with just a few clicks, and the necessary changes to user attributes, permissions, and system assignments are executed in the background (immediately or on a scheduled basis).
- Flexibility & extensibility: New attributes, fields, or processes can be easily added without disrupting existing workflows.
- Integration & scripting capabilities: PowerShell integration and database connectivity enable customer-specific customizations and rapid analysis.
- Transparency & traceability: Audit logs and clearly defined roles enable seamless control over all changes.
- User-friendliness: The web interface is intuitive, allowing even non-IT departments to work confidently.
In self-service mode, users can update their own profiles.
Our client was particularly impressed by the ability to customize the interface flexibly. It is easy to add additional attributes and fields, and the visual customization works exceptionally well.
The search function in the IDM-Portal is fast, and the results are immediately available without long loading times, which enables a smooth workflow.
These features made the IDM-Portal particularly well-suited to handling the growing complexity.
Implementation and collaboration
The project was structured and implemented in clearly defined phases. The collaboration was characterized by open communication, transparent testing and acceptance procedures, as well as rapid problem-solving. With the support of a strong team, the IDM-Portal was quickly put into productive use.
The main users are IT administrators, as well as administrative and specialist departments. Tasks such as user management, absence management, and, in some cases, group management are now securely delegated via role models. The company currently manages around 150 user and guest accounts.
Results – Standardized processes & time savings
The introduction of the IDM-Portal brought measurable improvements. All desired processes were successfully standardized.
✅ The user creation process was reduced from approximately 1.5 hours to approximately 20 minutes.
Thanks to automation, routine tasks are now handled automatically. This makes it possible to involve staff who do not have a deep understanding of IT user provisioning processes.
In addition, audit logs and clearly defined roles ensure an extra level of security and transparency. It is possible to track at any time who made which changes.
Thanks to its high user-friendliness, the IDM-Portal immediately won over employees. Simply selecting a checkbox is enough; all adjustments are then carried out automatically in the background. The administrative staff now maintains attributes independently, saving IT many support tickets. From the customer’s perspective, the IDM-Portal is a flexible IAM solution that combines databases, directories, scripts, and visual configurability, and can be easily adapted to new requirements.
Conclusion
The company has been a FirstAttribute customer for six years and highly recommends the IDM-Portal, particularly for its automation, standardization, and the trusting collaboration.
The IDM-Portal is ideal for companies that experience high employee turnover, frequent onboarding and offboarding, and lack sufficient IT staff to handle the growing workload in hybrid IT landscapes.
Above all, the portal drove the standardization of user creation: It creates user accounts consistently, from names and email addresses to group memberships and permissions. Processes that used to take the team about 1.5 hours are now completed in just 20 minutes. At the same time, the system automates many processes in the background, saving valuable time and significantly reducing the IT department’s workload.
More about FirstWare IDM-Portal
The FirstWare IDM-Portal from FirstAttribute is a user-friendly IAM solution for the automated provisioning and lifecycle management of all identities and groups in complex, hybrid IT environments.
Through targeted delegation and role-based access management, it enables business departments to independently manage identity data and permissions—supplemented by powerful Identity Governance & Administration (IGA) features such as audit logs, recertification, and compliance reporting.
