CASE STUDYTaking back control of identityand access management
Key Facts
Company

Swiss Post reduces administration workloads andtightens compliance procedures using a comprehensive
identity and access management solution.

Swiss PostIndustry

Postal services

Country

Switzerland

Employees

60,000Websitewww.post.ch/en

Challenges
Swiss Post wanted to replace
its custom identity and accessmanagement solution, which
was becoming increasingly
complex and expensive tomaintain.
Results• Reduces workloads byautomating accountmanagement• Improves organisation's
compliance thanks to better
access control• Ensures continued
development with modular,integrated components•R educes complexity andexpense of compliance
procedures
Products
Identity Manager

Identity and access management (IAM) is often a challenge forcompanies, with inconsistent and labour-intensive processes.
For Swiss Post, the national postal service of Switzerland, IAM wasa drain on resources because the organisation lacked an automatedsolution to manage its 100,000 Active Directory (AD) accounts.

The need for simplicity and transparency
Swiss Post used a script-based IAM solution that was no longer fit forpurpose. Jean-Luc Nottaris, Chief Information Security Officer at Swiss
Post, says, “It was too complex and expensive to maintain. Comparedwith newer IAM solutions, it was also inflexible and didn’t have thetransparency we needed to ensure compliance.” The recommendationfrom an internal review was to find a replacement. "We wanted to make
IAM more transparent and comprehensible. It was our goal to increaseautomation to make rights management more uniform,” says Nottaris.

“Identity Manager is optimally configurable forbusiness requirements and can provide a long-term
answer to any organisation’s IAM challenges.”
Jean-Luc Nottaris, Chief Information Security Officer, Swiss Post

A single solution for all
IAM requirements

Increases productivity
among personnel

Swiss Post ran proof of concept(POC) exercises for several
established IAM systems. One
Identity Manager proved easy toadminister and configure while
being highly extensible. Swiss
Post then worked with Unisys
to implement Identity Managerand deploy an IAM Toolbox. TheToolbox includes processes andtools for managing entitlements
through business roles as wellas compliance and governancerequirements.

In just 12 months, Swiss
Post might need to createand suspend thousands of AD
accounts. Nottaris says, “It could
take two or three phone callsfrom line managers to geta change made in AD. They
don’t have to do that anymore
now that we have Identity
Manager. They’re free to focus
on their work.”

Cuts workloads thanks toautomation
Today, Swiss Post has reduced
the time that administrators
spend on IAM because of thehigh levels of automation in
Identity Manager. Nottaris
says, “When employees change
roles within the company, theiraccess rights can be changed inseconds using Identity Manager.”
Automation not only saves time,
but it also eliminates the risk oferrors creeping in. “Previously,our IAM processes were complex
and error-prone. Now, withIdentity Manager, our processes
are consistent,” says Nottaris.

Improves compliancewith more efficient access
control
Swiss Post is better able toensure compliance through thetransparency of the One Identity
product. “I’d feel less confident
about compliance if we went
back to our old system,” says
Nottaris. “With Identity Manager,
we have improved governanceand access control.”Supports continued
development throughmodularity
A key reason for choosing
Identity Manager was its
extensibility. Comments
Nottaris, “We can develop ourOne Identity and the One Identity logo are trademarks of One Identity LLC. Other trademarks
are property of their respective owners. Availability and terms of One Identity LLC, Solutions andServices vary by region. This case study is for informational purposes only. One Identity LLC makes
no warranties – express or implied—in this case study. © 2017 One Identity LLC. All Rights Reserved.

One Identity solution in linewith the needs of the business.
Identity Manager is optimallyconfigurable for business
requirements and can provide
a long-term answer to any
organisation’s IAM challenges.”
About One Identity
The One Identity family ofidentity and access management(IAM) solutions, offers IAM
for the real world including
business-centric, modular andintegrated, and future-readysolutions for identity governance,access management, andprivileged management.
About Unisys
Unisys is a global IT service
provider specialising in businesscritical solutions. From definition
to implementation, Unisys
supports its clients in IAM
projects and provides specialists
who can guarantee their successwith their experience andknowledge.
Learn more: OneIdentity.com