The migration contained various subject areas. Which include the mapping of diverse workflows, the supply of comprehensive online ordering portals, the binding of target systems for provisioning, role based access control (RBAC), historization and reporting for ensured transparency, secure password management, and recurring, tool based attestations. Thanks to the modern solution privileged account management, segregation of duties (SOD) and other requirements to the compliance can be ensured.

In a first step the current process state was recorded and the target process map was created. The connections to supply- and consumer processes were included.
Then the target processes were developed and depicted in ARIS.
The business role concept was defined in order to modell the business roles. Additionally a IAM-guideline for the BaFin-examination was created.
This was followed by the implementation and continuous additions to the IAM-solution. The financial service provider still takes advantage of the IPG-experts' know-how through IPGs operational support.

The specification of the changes was based on the requirements to the IAM-solution and included the development and configuration of the Quest One Identity Manager (Q1IM). The completed changes were documented and transferred to the productive environment. Additionally web-frontends and workflows were modelled. IPG also supports the financial institute in providing 3rd level support.

IPG analyzed the technical possibilites for the use of entitlement roles. The support of this process lastet multiple months.

The project includes the development of a meta employee database and the integration of employee data from multiple HR-systems and other feeding systems like telephone systems. IPG acted as technical project manager and analyzed and specified the process for user life cycles during multiple months.

The project included the conception and development of a role catalogue for six selected systems. Data interfaces were conceptualized and implemented. For better compatibility with the new role model, the permissions of 137 applications were redesigned. This continuous process lasted two years.

Die Einführen einer Reporting-Lösung für Endbenutzer für die selbständige Generierung von Reports über die derzeitigen Berechtigungen. IPG unterstützt die Schweizer Bank als Fachberater und Engineer und implementiert erweiterte Funktionen für privilegierte Anwender wie Data-Owner, Linienmanager, Revision oder Berechtigungsmanagement.

Implementation of a reporting solution so that endusers can generate reports containing information on the current permissions indepentently. IPG supported the swiss bank as expert consultants and engineer and implemented extended functionality for priviledged users like data-owners, line managers, and for revision or permission management.

In the function of release manager ad interim IPG supervised the provisioning and workflow software with approximately 300 interfaces. Some of the tasks were the recording of department requirements, the conception of the solution architecture, the planning of developers and releases, testing coordination, and introduction. This representative function was assumed by IPG for nine months while the release manager was absent.

In the german financial institutes project, IPG assumed project leadership as well as management of the implementation team. In the frame of the project, the functional and technical coordination were defined and workshops to reprocess them were executed with the involved departments.

IPG received the task of analyzing if priviledged account management using Cloakwares products could be intrododuced. To this end, IPG recorded the requirements of the business, examined the current processes, and clarified the workings of the software solution.

IPG analyzed the system environment and the organizational structure of the swiss bank. The modelling of roles and the agreement were developed in workshops. IPG supported the bank in the introduction of the roles.

The investment company tasked IPG with the execution of the project- and phase-planning, a survey of the current state of user lifecycle management processes, permission assignment and permission withdrawal, as well as the review and authorization of existing permissions. The project further included the creation of a requirement catalogue for the selection of a suitable IAM product. In connection with roles, technical and role concepts had to be created, role structures developed and roles modelled. The support during product launch and the handling of test management and -execution rounded off the project.

The guiding and controlling of the project team and the development and implementation of new processes within the scope of user lifecycle management were handled by IPG. For this purpose technical and role concepts as well as a requirement catalogue were created to aid in product selection. Afterwards, a product was selected and the tools for analysis of permissions and role modelling were implemented. IPG offered support in the connecting of significant IAM target systems, handled the test management, test case creation, and test execution. IPG accompanied the introduction of the system regarding the rollout and education.

IPG supported the bank in Germany in building a team to handle test management in projects and in shaping tasks for this team. The goal was to develope uniform management templates as well as establishing templates and standards. Additionally, a standardized testing approach was introduced by means of trainings and coachings at the workplace, and test concepts, -step-by-step plans, and test cases were created. IPG consulted and supported the team in various projects in regard to test planning and -execution.

IPG guided and controlled a project team of a german bank in this project. The project included the execution of a conception for the introduction of a PKI for the use of an SSO solution. IPG accompanied the project team during the process of product solution and the implementation of the PKI. Furthermore the project included the planning of the rollout of the chipcard based SSO solution for all employees, the pilot- and final testing. The rollouts, trainings and coachings for the use of the chipcard and SSO solution were executed subsequently. Moreover IPG led the integration of additional applications to the SSO solution.

IPG guided and controlled the project team in the project "Introduction of E-Mail Encryption", which entailed the analyzing and conceptualizing of a possible solution for email encryption, as well as the selection and implementation of a suitable product on the basis of a gateway solution. Furthermore the rollout and coaching of the users in handling the email encryption was executed under the guidance of IPG.

This project was performed with the goal of recording the current state and further development of the framework of an international financial service provider. IPG ascertained and documented the current development state of the framework. Furthermore the ascertaining of requirements for the framework, the execution of code reviews, and the creation and preparation of information for future use (documentation and handbook) were parts of the project.

IPG performed an analysis of the employee permissions and modelled roles while taking the risk factors and separation of functions in the whole business into account. The process of transforming the permissions of approximately 200 bank applications took two years and included the processing of predefined measures for the conversion of permissions as well as for the creation of reports for various target groups.

The existing business rolemodel was reviewed and refined in cooperation with the departments and an analysis of the existing permissions was done.

The business roles were modelled (Role-Engineering) on this basis in cooperation with the departments, in form of workshops, and implemented in the IAM solution. Determining the business roles took place iteratively, which means that the finally required permissions were determined in multiple determination rounds. The no longer needed employee permissions were cleaned as well.

Furthermore an analysis and optimization of the user lifecycle management processes was done and the existing IAM processes were revised in the tool.

Flanking the technical introductions, IPG tackled the role model. Which roletypes are the most efficient was examined using the Nexis contROLE software.

To relieve the helpdesk, IPG introduced the Evidian Password Manager. With it, incidents for password changes and unblocking could be reduced by 90%.

In a first step, IPG analyzed the needs of the health insurer and ascertained the requirements. Subsequently the courses of action were derived and solution possibilities were formed with the client. IPG also provided support in the creation of the final report, which included an IAM roadmap, and in preparing the presentation to the management.

To satisfy the growing requirements towards compliance, an Identity & Access Management (IAM) solution was evaluated and introduced under the overall management of IPG. Unter the lead of IPG the functional and technical requirements for IAM were specified and evaluated. After a solution evaluation, the implementation of the IAM software with the connection of multiple source- and target systems like SAP, RACF, AD, Exchange, and client specific solutions took place. With the implementation of a comprehensive reporting the SOX-requirements were met.

The first step in introducing business roles was to develope the requirements of the application processes. In a second step Nexis contRole was integrated as a role management system using a web service, and the mapping of various ordering workflows, the approval and recertification process of roles, and the creation and management of external employees was implemented. Subsequently IPG configured and adjusted the web interface of the NetIQ Identity Manager. The training of administrators and the documentation rounded off the project.

In this project, IPG was responsible for the planning, controlling, and documentation of the conception phase. This included the execution of project- and phase-planning as well as workshops for the determination of the requirements towards the Identity Management System. Furthermore the project included the project evaluation. IPG also led various workshops for the recording and design of the user lifecycle processes, the application procedure, the introduction, and the future use of business roles.

At the start of the project, IPG led, controlled and documented the proof of concept. Furthermore IPG led the project- and phase-planning as well as the workshops for the determination of requirements. To this end, the permission structure of six future IAM target systems and the existing processes for the assignment and verification of permissions were analyzed. In the implementation phase the technical and role concepts were created, role structures were developed and roles were modelled.

This project included the execution of the project- and phase-planning as well as the workshops for the determination of requirements, the modelling of roles, and the harmonization of the roles with the role owners.

In a first step, the IT requirements for the replication of OpenLDAP servers in the Linux/VM environment had to be defined. In a second step the measurements of performance and debugging was executed in the heterogenous VM environment and the needed scripts were created in perl.

In this project IPG was tasked with the introduction of an IAM system. This included the consulting of the departments in analysis and conception of the technical requirements, the planning, conception, and implemenation of the complete IAM-system architecture (three environments/stages). Furthermore the project included the documentation of the system and the content provision for the responsible employees. IPG also conceptualized and implemented the interfaces for the following source- and target-systems: Oracle Database Application, Mainframe (using RACF), PeopleSoft HR System, and SAP User Management. Finally the custom workflows for account- and permission requests were implemented.

In this project, IPG was responsible for the development and establishment of roles as well as the processes in the line of business. IPG handled the training of all parties involved with the processes and the role owners. Furthermore the project included the building of reporting functionality for all hierarchy levels and the ensuring of the technical operation of the IAM software solution, especially the role competence center. IPG supported the line of business regarding the IAM processes during operation, and contributed in the role of co-developer in fundamental IAM-decisions and -architecture.

To this end IPG analyzed 30 future IAM target systems regarding the permission structure and compliance with separation of function. A company wide, uniform separation of function specification had to be defined. IPG conceptualized the role model and supported in the criticality of roles. A pilot with 1000 employees was done to validate the target specifications. IPG was part of the steering committee.

Apart from technical work, IPG also provided consulting services in the areas of business processes, IT-webshop, and role design. Furthermore the SoD rules for the separation of functions and for the recertification were created and implemented. Additionally IPG supported the clients team within the scope of partial operation during its daily tasks.

The project included the consultation on the topic of role models in connection with role based access control (RBAC) and on the topic of company wide IAM processes. Additionally IPG organized IAM workshops and handled the coordination of organizational and technical topics. The project scope also included the analysis of the web designer implementation, the implementation of SoD functionality using the Quest One Identity Manager, the connection of SAP HR target systems, the connection of SAP CRM target systems and the redesign of HR personal data exports. Finally all the new functionality in the IAM solution Quest One Identity Manager (Q1IM) was implemented by IPG.

The project included the installation and configuration of the Quest One Identity Manager. IPG supported the business by consulting it on the topic of HR imports and by configuring it. The configuration of interfaces for the target systems and the creation of test cases were also part of the project scope.

This partial project management was comprised of the complete development of cross system roles and the design of the role model. To this end IPG conducted interviews and analyzed the permissions existing on the systems.

To this end a "reading IAM" with interfaces to various permission systems was realized and tools and notifications regarding data consolidation were introduced. The IAM organization, IAM processes, and IAM concepts were optimized and the maturity was increased. Since then the IAM-system has been set to write as well, has been connected to the target systems, and is now master in provisioning of user accounts and permissions. The IAM system is completed by adding components like a self service portal, password management, and single sign on and fast user switching, both of which are being built at the moment.

IPGs experts supported the departments in the description of requirements and developed a solution design. To ensure project success, the project was structured into multiple stages. Thanks to the new IAM solution, the hospital can efficiently manage the most important systems like SAP, AD, Exchange and various hospital applications efficiently while ensuring compliance. For the trouble free operation and a maximum degree of automation the IAM processes were completely redefined in advance and anchored in the organization.

A modern self-service portal allows employees to order business roles. This portal was developed together with the various clinic fields and handed over to the role owners. Today the IAM system manages all relevant systems and applications, for example Active Directory, Exchange, KISIM, Kaba Exos, IBI-care, PEP (time recording), Synedra and even washing machines (Badge based operation).

Unter the lead of IPG a powerful IAM infrastructure was built in the hospital along with various organizational adjustements, new processes, and the introduction of business roles. The IAM base infrastructure was realized with the Dell One Identity Manager. Many permission systems like Active Directory, Exchange, Hospis, KISIM, Kaba Exos, IBI-care and Polypoint were integrated for automated provisioning. A simplification for endusers was achieved by implementing a single sign on solution on the basis of Imprivata OneSign.

The technical concepts were specified, and the business processes surrounding Identity & Access Management were developed in a first step. In a second step, D1IM was implemented. Then IPG coded tailor-made interfaces for the provisoning and finally transferred the solution into the productive environment.

In the course of developing an IAM strategy, the software distribution was migrated, and monitoring and operational support were provided. Furthermore the application managers were defined. In the scope of the project IPG supported the hospital in building a knowledge-base-database and a patient network.

Für die Analyse von Mitarbeiter-Berechtigungen wendete IPG den Bottom-Up-Ansatz an. Das Vereinbaren von Geschäftsrollen fand aufgrund von Interviews mit den zuständigen Fachbereichen (von Arzt bis Direktion) statt. Hierzu wendete IPG den Top-Down-Ansatz an.
For the analysis of employee permissions IPG employed the bottom-up approach. The arrangement of business roles was done on the basis of Interviews with the responsible departments (ranging from doctor to management). For this IPG employed the top-down approach.

This university of applied sciences with three locations and 25 departments planned to replace the in-house developed "SystAdmin-Tool" with IAM. The objective was to reduce administrative efforts, develope a documented user lifecycle process, implement a role concept, and connect various applications like AD, SAP HR, Helpline and multiple Databases. In the meanwhile various target systems like Office 365 and various SAP-modules were added, and additional user lifecycle processes, for example the creation of SAP-users after a name change or the creation of a employee in the CampusNet, were implemented. A migration to the new IAM version was done recently.

regarding SAP-HR (using SOAP by means of JAVA EE), and database applications using staging tables were connected. Automated role- and premission assignment was implemented according to the role model. CustomThe specific requirements were analyzed in cooperation with the client and the interface definitions for the to be connected systems were developed. The existing business processes (BPMN) were also modelled and analyzed. Afterwards IPG deisgned and implemented a role based access modell (RBAC) for students, employees, external teaching staff, etc. and created a specification.
Connectors for target systems like Microsoft Active Directory, SAP-modules, HR- and user-management (using iDoc and BAPI), student management (web application) using SOAP webservices, custom java webservice for specific requirements workflows were implemented for the individual business processes. The migration of existing user accounts took place according to the migration plan. Following this, a partial approval was prepared and executed. By training the clients employees internal know was built.

IPGs participation took place in the scope of the conception and implementation of an Identity Management System. The task comprised the importing from two source systems and the connection of more than 10 target systems (AD, SAP user management, databases, SOAP).
Furthermore IPG handled the modelling of various workflows and roles, the configuration and adjustment of the NetIQ Identity Managers web interface, the creation of special accounts (guest accounts, event accounts, ...) using the NetIQ Identity Manager web interface.

IPG führte durch einen eintägigen Remote-Workshops zur Bildung eines Open LDAP Custom Management Agents (ECMA 2) unter Microsoft Forefront Identity Manager unterstützt von einem C# Entwickler für die Fachabteilung.

IPG led a one-day remote-workshop on the topic of creating open LDAP custom management agents (ECMA 2) in the Microsoft Forefront Identity Manager supported by a C# developer for the specialist department.

The challenge of a comprehensive IAM solution for a whole city administration are that the various bodies shape their business processes autonomously, but a homogenous IT architecture is required for a joint e-Government-solution. Furthermore it is still unclear, how pronounced the IT-standards for a federative IAM on a federal level will be. This is why it is important for this project, that an open IT architecture allows the further development for a federation IAM.

Developing a collective understanding for the topic of Identity & Access Management and defining following steps for the initialization of an IAM project were the goals of the workshop. IPG handled the task of moderation, content-reladed consulting, and documentation.

The analysis of the infrastructure and existing software inventory included bug creation and fixing. The transport of softwarepakets into the stages and monitoring the environments followed. The tasks in the area of support included 3rd level support (ITIL compliant ticket processing) and the training for 2nd level support. Furthermore Wiki entries were created and internal projects (new or revised connectors for source-/target systems, matching of data) were executed.

Central directory services were developed for the IAM solution using Siemens DirX Identity 8.0. The Services were transferred to productive operation after successful test operation. In a next step, solutions for increasing operation security and for intergrating services in management solutions (HP Openview family and Nagios) as well as their webinterfaces running on Apache / Tomcat prototyping of new applications were set about.

IPG acted as an expert and analyzed and assessed the fundamentals and completed them with the project team. At the centre of the project was the developing of solution concepts, complementing the existing solution approaches, verifying the feasability of the use-cases and requirements, as well as identifying the cost drivers, advantages and disadvantages.
To this end IPG defined a target solution, including a reference module and modularization, and defined and described the relevant IAM processes according to the best practices. A mapping of the use cases and processes and a verification of the use-cases regarding completeness and correctness was done also. Subsequently the various solution concepts were developed. The documented architecture variants/solution concepts were compared and assessed, and the preferred solution was further detailed with the client.

After the successful development of the IAM system, the Canton Hospital relied on the expertise of IPG IAM Operation Services to keep the implemented processes, the connected systems and last but not least the managed data up to date and to correct them if necessary.

After the successful development of the IAM system, the Canton Hospital relied on the expertise of IPG IAM Operation Services to keep the implemented processes, the connected systems and last but not least the managed data up to date and to correct them if necessary. After improving usability with a Single Sign-On solution, the hospital opted for security and integration with professional operational support.