Enhanced Security and Compliance with IAM at KGAL

Access Rights: Manual Processes Had Reached Their Limits

KGAL already had an internally developed solution in place to support standard processes for employee onboarding and offboarding. However, it reached its limits when it came to managing roles, recurring recertification, and centralized governance. Additional workflows involving Excel and tickets required considerable manual effort, made processes harder to track, and increased the need for coordination between IT and business teams.

KGAL therefore needed a professional IAM solution that would centralize and automate existing processes while remaining flexible enough to accommodate the company’s individual requirements. After evaluating several vendors, KGAL selected Garancy Identity Manager in 2022, and the solution has been in production since July 2023.

Centralized Identity Governance with a Differentiated Role Model

With Garancy, KGAL introduced a centralized platform for access rights management. Existing systems were connected, standard processes were automated, and recertification was integrated into a centralized workflow.

A key component is the role model, which was further developed as part of the project. Basic, organizational, functional, and business roles cover different access assignment requirements – from fundamental access rights for employees to specific permissions for individual tasks and external service providers.

The integration of existing systems was also standardized. Access rights for numerous applications can now be provisioned automatically once approved. Where manual provisioning is required, Garancy integrates with the ticketing system. This creates a more seamless link between access requests and actual provisioning, reducing unnecessary rework and eliminating process disruptions between different tools.

The Result: Less Effort for Recertification and Administration

The benefits are particularly evident in access recertification. Previously, access lists for individual applications were processed using Excel and tickets – a process that could take one to two weeks. With the Garancy Recertification Center, progress can now be monitored centrally, while an employee’s access rights can be reviewed across applications. 

At the same time, KGAL has built up sufficient expertise with the system to implement many adjustments independently. For larger projects and changes, KGAL works together with the Garancy team to develop the right solution. 

Results at a Glance 

• Automated Joiner, Mover, and Leaver processes

• Significantly simplified access recertification

• Flexible role models for internal employees and external service providers

• Less manual effort for IT and business teams

• Greater transparency, compliance, and traceability

• Independent administration of many changes without vendor support

IAM as a Building Block for Secure IT

By centralizing access rights management, KGAL has gained greater transparency into existing access rights and reduced the risk of unauthorized access. Automated standard processes reduce the workload for IT, while centralized recertification helps the company meet compliance requirements.

The detailed customer success story explains how KGAL developed its role model, integrated existing systems, and redesigned its approach to access recertification.

Read the Full KGAL Success Story

Learn more about KGAL’s IAM journey. The full customer success story PDF shows how KGAL replaced individual manual processes with centralized Identity Governance – and how Garancy brings together role management, system integration, and recertification in a single solution.