National retailer boosts savings
with automated provisioning
Mattress Firm cuts risk, speeds provisioning
by 90%, saves millions of dollars and governs
access to all digital tools including Workday HRand Microsoft Office 365.
Customer:
Mattress Firm
Industry:
Consumer Products

90% faster provisioning.

Country:
United States
Website:www.mattressfirm.com

Challenge
To facilitate rapid growth, Mattress Firm
needed to improve system access controls,
accelerate onboarding and offboarding, andsimplify hierarchical changes.

4 hours or less for deprovisioning
versus 1 week or more.

Doubled the efficiency of IT staff.

83% reduction in IAM
server footprint.

Solution
Mattress Firm deployed One Identity Manager
to automate provisioning and deprovisioning
workflows so that employees’ system accessprivileges always reflect their current—andstandardized—role.

1

Improves security, service levels
and innovation.

CASE

STUDY

-MATTRESS

FI R MONE

To drive growth, national retailers must ensure
employees have quick access to the digital tools theyneed to deliver excellent customer service. However,frequent employee turnover, fluid organizational
hierarchies, and complex identity and accessmanagement (IAM) workflows often slow provisioning
and deprovisioning. Not only do these challenges
hinder service, but they also increase costs, restrict
innovation, and create security risks.
Houston, Texas–based Mattress Firm is well versedin these IAM challenges. With 2,000 stores across
49 states, the nation’s leading bedding retailer
recognized that its existing IAM solution could
no longer meet its requirements. Andy Martinez,
manager of application integrations and identity
management at Mattress Firm, explains, “Ourbusiness is growing quickly, and it’s very dynamic.
Every week, we have about 40 sales employees
coming or going from stores. Onboarding andoffboarding had become unmanageable. Newemployees often had to wait a week to get theright levels of access, and deprovisioning could
take even longer.” A mix of manual and automated
IAM workflows restricted insight and resulted ininconsistencies and errors. And IT staff werespending so much time on IAM, they couldn’t
develop innovative apps to further boost service.

Gaining a flexible IAM
foundation—in just five months
Mattress Firm evaluated new solution options andchose One Identity Manager. “Unlike the othertechnologies we looked at, One Identity Manager
is very flexible and easy to learn and configure,”
Martinez says. “Customizations do not require ahigh-level developer. And we really like the simulation
function because we can validate changes toaccounts and distribution lists before they’re made.”
To speed deployment and maximize return on
investment, Mattress Firm engaged One Identity

2I D ENT I T Y“Our engineers get backabout 4 hours every day
now that we use One
Identity Manager. We’ll
save millions of dollars ayear as a result.”
Andy Martinez,
Manager of Application Integrations
and Identity Management,Mattress Firm

Professional Services. “In just five months, weredesigned our IAM workflows using One Identity
Manager,” Martinez says. “And even though it’s much
faster at processing everything, One Identity Manager
uses just 3 small physical servers instead of the 18
our previous solution required.”Working remotely with One
Identity consultants, MattressFirm’s IT staff:•Automated workflows and implemented single
sign-on so that One Identity Manager governs
access to all digital tools including the Workday
HR platform, Microsoft Office 365, and othersystems that manage inventory and interactions
with customers, including at point-of-sale.

•Created 400 employee roles with standardized
access privileges to ensure consistency.

•

Added two-factor authentication forcloud services.

•Streamlined initial application login processesONE

I D ENT I T Y“Even if there are 40 new hires in one day, we’ll haveeveryone fully provisioned in 4 hours or less with One IdentityManager. And now that people can start working on day one,
we’ve seen productivity go up everywhere.”
Andy Martinez,
Manager of Application Integrations
and Identity Management,
Mattress Firmby automatically populating field data withinformation from Active Directory.

Speeds provisioning by 90%•

Provided remote training for IT personnel thattargeted their specific needs, at a time thatworked best for their schedules.

•Automated new leave-of-absence policies that
restrict access to employees’ benefits and salary
information in Workday, which was especiallyhelpful when COVID-19 temporarily closed
stores nationwide.

Employees now have 90 percent faster access to thedigital tools they need when they start a new position.
That’s because One Identity Manager automaticallydetects new and modified staff profiles in Workday—
and any changes made to the organization’s
hierarchies in Microsoft MDM—and immediately
provisions access based on employees’ up-to-dateroles. “Even if there are 40 new hires in one day,
we’ll have everyone fully provisioned in 4 hours orless with One Identity Manager,” says Martinez. “Andnow that people can start working on day one, we’veseen productivity go up everywhere, especially forsalespeople and temporary contractors.”

Doubles IT staff efficiency andsaves millions of dollars
By deploying a holistic IAM solution withautomation, IT staff spend less time on provisioning,deprovisioning and hierarchical changes. “Ourengineers get back about 4 hours every day now that
we use One Identity Manager,” Martinez says. “We’ll
save millions of dollars a year as a result—and there’s
less stress and overtime. When our engineers leave
work for the day, they’re done. They don’t have toworry about anything.”

3Cuts risk and insurance costs
Today, Mattress Firm knows that when an employee
leaves a position, their access privileges willautomatically be revoked. “We improved our security
stance with One Identity Manager,” Martinez explains.
“Deprovisioning occurs automatically within 2 to 4hours. And by demonstrating how we’ve lowered risk,we’ve even reduced our insurance premiums.”

ONE

Automated workflows also eliminate errors inherent inmanual data entry and inconsistencies in roles’ accessprivileges. With One Identity Manager, IT staff canquickly see who has access to what—and they canimmediately generate reports for audits. Two-factor
authentication also verifies that people logging into
cloud systems are who they say they are. “I can trust
our IAM processes now that we use One Identity
Manager,” says Martinez. “I’m no longer up at night
wondering if jobs were completed correctly.”

Boosts innovation andcustomer services
IT staff are using their recouped time to develop
apps that improve operations. Giving an example,Martinez says, “We recently stood up a status pagefor the inventory team that alerts them about POs
that are about to be late, so they can notify ourpeople in the field. Before we deployed One Identity
Manager, we would not have had the time to workon projects like this.”Business employees are also more efficient insupporting customers. “Single sign-on translates into
faster service because customers aren’t waiting for arepresentative to log into multiple systems to checkthings like delivery status or warranty information,”says Martinez. “All our lives are a lot easier now that
we use One Identity Manager.”
View all One Identity case studies atOneIdentity.com/casestudies

I D ENT I T Y“We improved our security
stance with One Identity
Manager. Deprovisioning
occurs automatically within
2 to 4 hours. And bydemonstrating how we’ve
lowered risk, we’ve evenreduced our insurance
premiums.”
Andy Martinez,
Manager of Application Integrations
and Identity Management,
Mattress Firm

About One Identity:
One Identity, a Quest Software business, helps
organizations establish an identity-centric security
strategy. With a unique identity and accessmanagement (IAM) portfolio, our award-winning
offering includes identity governance, AD-centered
IAM, privileged access management and Identity SaaS
solutions, One Identity helps organizations secure
their enterprise end to end, smoothly make theirdigital transformation, eliminate identity challenges
and reduce their attack surface from internal andexternal threats. Our unequalled commitment to ourcustomers’ long-term IAM success is evident in our
7,500 customers worldwide that rely on us to manage
more than 125 million identities. For more information,
visit www.oneidentity.com.

The One Identity logo is a trademark of One Identity LLC and/or its affiliates. Other trademarks are property of their respective owners. Availabilityand terms of our solutions and services vary by region. This case study is for informational purposes only. One Identity LLC and/or its affiliates makeno warranties—express or implied—in this case study. 2021 Quest Software Inc. All Rights Reserved.

4