Sonatel
Profile• The first telecom operator
in Senegal.
• A France Telecom
subsidiary.
Users• 2500 employees in
4 African countries(Senegal, Mali, Guinea,Guinea Bissau).
• Offices in all of Senegal's
14 regions.
Challenges• Simplify and secureaccess.
• Adapt to the existing
information system.
• Scale with market growth.
Benefits• Central point to define andaudit accesses.
• Major reduction in thenumber of passwords
used.
• Quick deletion of uselessaccounts.

Senegal's leading telecom operator facilitates and secures IT access.
Rationalizing access policy in a telecommunications company
Sonatel, Senegal's first telephone company now provides telephone (land and cellular),internet, television and data services to over 5 million customers in Africa. A 42% owned
subsidiary of France Telecom, Sonatel is Senegal's leading telecom company and has become
the top provider of mobile telephone services in Mali.
Sonatel regularly integrates new international affiliates to support its strong growth (+13% in2008). New users are managed in local directories, but must use corporate applications suchas CRM, reporting and inter-operator compensation. As a result, Sonatel realized that itneeded to optimize its access policy.
“As a France Telecom subsidiary, we are subject to strict internal requirements in terms ofsecurity policies” says Babacar Kebe, identity and access management project leader at
Sonatel's Information Systems Division. “To rationalize access rights, these rights must be
strongly linked to the identities of their users, and the entire company's application accounts
must be managed centrally.”
Until now, administrators had to update accounts on a case by case basis, with 5 to 7
applications per user. And each employee had to manage as many passwords on a daily
basis. Sonatel's general managers therefore decided to invest in an overall identity and accessmanagement solution.

Choose a complete solution
After pre-selecting three market-leading identity and access management suppliers, Sonatel
selected Evidian's offer. The functional criteria were met and Evidian was able to demonstrate
its hands-on experience in the telecommunications market.
“Evidian stood out because its product is more than just single sign-on: it covers the entire
process of managing identities and accesses” says Babacar Kebe. “In addition, Evidian'ssolution was deployed in many companies in our industry sector, which made us feel confident
about our project.”
From now on, this solution will let Sonatel manage its users and assign them access rights toresources in a uniform, universal, and quick fashion.

Case study > Telecommunications

www.evidian.com

Deploy identity and access management
In keeping with Sonatel's policy, the project began with a week of general, initial training forthe project managers and technicians. The functional and operational aspects of Evidian'ssolution were presented in detail.
The first step in deployment was single sign-on (SSO). Each employee now uses only one
password – the one used to log into Windows on Microsoft Active Directory. Evidian's solution
fills in all application passwords transparently, on the condition, of course, that the security
policy grants the necessary access rights to the employee.

“Feedback is positive; noproblems were observed during
deployment in the field.
Evidian's solution will allow us
to define and control our entire
access security policy from asingle location.”Babacar Kebe,Project Manager,Sonatel.

“Feedback is positive; no major problems were observed during deployment in the field” says
Babacar Kebe. “In addition, we didn't even need to train the users – short informational
brochures were more than enough.”To achieve this result, Sonatel relied on experienced internal project managers who validated
the deliveries from the publisher and the integration service providers. And they had local
leaders and department heads participate in the project as well. The IT division and a sales
office acted as pilot sites, followed by general deployment in late 2009.

Precise management of application accounts
To satisfy Sonatel's access security policy, the accounts that the SSO gives access to aredefined centrally. The next step involves automating account updates, either directly or byautomatically sending instructions to administrators.
Since Sonatel’s entire user data is gathered in a reliable directory, creating, deleting andupdating accounts for sensitive applications will be automated. Evidian's User Provisioning
module performs these operations according to Sonatel's business rules.
Provisioning the accounts lets Sonatel know what a user's access rights are, as well as thosethat the user actually uses, from a single location. This considerably accelerates audits andincident diagnostics. And when an employee leaves Sonatel, his or her accounts are quickly
deleted.

39 A2 58LV
77LV 00
02 – Duplicopy – 2009

“Evidian's support is effective and available; we can count on professionals who have a deep
understanding of the products. And since Evidian's solution develops regularly, we are kept up
to date on its numerous features” adds Babacar Kebe.

© Eviden. Evidian is the registered trademark of Eviden. All products, brand names, service marks, trademarks and other names mentioned in this document areproprietary to their respective owners and are protected by applicable trademark and copyright laws. Evidian reserves the right to modify the characteristics of its products
without prior notice.