CUSTOMER STORY

LEVERAGING ONELOGIN AND WORKDAY
Asset Management Company Achieves Compliance
And Enhances Security“OneLogin was the perfect solution for bridging theidentity gap between our HR and User Directory
systems as well as our entire application landscapeCustomer
A global asset

going forward.”

management firm

vice president of it

Industry
Financial Services

Size
Challenge

Over 1,500 employees

As a global asset management firm with over 1,500 employees, thiscompany is in the process of shifting IT operations towards a more

Challenge

cloud-based infrastructure and application set. Its VP of IT was seeking

Shift IT operations to a more

an identity and access management (IAM) solution to solve a number

cloud-based infrastructureof challenges exacerbated by its rapid growth.

and application set

While SAML had been on his radar for several years, existing approaches
involving SAML authentication were resource-inefficient. Further, theirlocal cache-based password management system was unstable andcould not scale to their requirements. And employees, contractors andpartners were struggling to cope with multiple passwords.

SolutionCentralized, single sign-on
portal consolidates access tocloud apps using OneLogin
Bridge the gap and eliminate

As Workday drove identity, the firm lacked user synchronization

the effort of manuallywith Active Directory (AD). This meant that there was a great deal of

updating user attributes withmanual effort involved in updating AD with any attribute changes. This

Workday integration

was linked to another problem – the need for a SOX-compliant audit
trail with instant revocation of application access upon employee job

Resultstransition or termination.

Save time and effort syncing

Lastly, thousands of user credentials floating around wereinconveniencing users, and introducing significant risk to the business.

user data between systems
Demonstrate SOX compliancethrough improved audit
capability and access controls

Solution
The organization’s primary goal with single sign-on (SSO) was toeliminate passwords entirely. This business has taken a hard stanceagainst non-SAML-enabled apps. OneLogin has enabled the firm
to deliver secure and convenient access to all their applications.

O N E LO G I N . C O M

2With Desktop SSO, users simply log into their Windows PCs as normal
and transparently authenticate to their domain and cloud services.
While Active Directory continues to serve as their primary user directory,
OneLogin’s tight integration with Workday has effectively bridged thatgap and eliminated the effort of manually updating user attributes.
This integration has enabled the firm to add and remove new apps
and users with newfound ease and peace of mind. “OneLogin has
been huge with onboarding employees and setting up accounts,” said
the VP of IT. Also, by leveraging the integration with Duo Security,
they have extended two-factor authentication to their VPN, virtuallyeliminating the risk of unauthorized access to both on-premise andcloud resources.
OneLogin’s reporting functionality is, as the VP of IT put it, “the rightway to do it,” as it has given the firm visibility into current and past
information about application access.

Results
Since the rollout, the firm has been able to save an enormous amountof time and effort involved in manually syncing user data between
systems. They have effectively eliminated passwords from the user
experience and from potential leakage or theft. They are now able todemonstrate SOX compliance through improved audit capability andaccess controls. Looking forward, the firm is prepared to securely
deliver any app to any user at any time. As the VP of IT says, “it has
made our lives immensely easier.”

About OneLogin, Inc.
OneLogin brings speed and integrity to the modern enterprise with anaward-winning SSO and identity-management platform. Our portfolioof solutions secure connections across all users, all devices, and every
application, helping enterprises drive new levels of business integrityand operational velocity across their entire app portfolios. In June
2015, Forrester Research named OneLogin as a leader in cloud identityand access management. The choice for innovators of all sizes such as
Condé Nast, Pinterest and Steelcase, OneLogin manages and secures
millions of identities across more than 100 countries around the globe.
We are headquartered in San Francisco, California. For more information,log on to www.onelogin.com, Facebook, Twitter, or LinkedIn.

O N E LO G I N . C O M

Leveraging OneLogin tosync all AD attributes toWorkday made our lives
immensely easier.