CUSTOMER STORY

Lincoln Investment Empowers Financial Advisors,
Secures Access with MFA and Identity Management“For IT, OneLogin is really easy to administer, and from afield perspective, we have a very high level of adoption,with ease of use being the primary driver.”Guru Rao
VP APPLICATION DEVELOPMENT

With 450 employees and an external network of 1,100 financial
advisors serving 320,000 clients, Lincoln Investment offers
high-quality investment and insurance products, service andsupport to help investors achieve long-term financial goals.
Its AdvisorLinc portal, with up to 250,000 logins per month,
was natively developed in-house, and provides access to client
data as well as investment products and information, whileserving as a gateway to several internal and external apps.

CHALLENGES
Security is a highly sensitive topic in the broker-dealer industry, as overall
trust has been impacted by adverse publicity and resulting regulations.
In addition, new ideas and innovation from fintech companies are forcing
companies to reevaluate and adjust to strengthen their value proposition foradvisors and clients.
Lincoln had the foresight to embark on a technology transformation withincreased security and ease of use as a competitive advantage, with anidentity and access management (IAM) system being a key element. “Weput information security as a top priority, and identity management andmulti-factor authentication as a very important factor to help us standout from competitors,” says Guru Rao, Vice President of Application
Development with Lincoln Investment.
For its office employees, Lincoln was evaluating several standard cloudapps, including G Suite, Slack and Zendesk, as well as internally-developedtools. Access for employees and advisors to the external portal apps weredriven through Windows Active Directory (AD), with simple username andpassword access.

INDUSTRY
Financial Services – Investments

SIZE
Over 2,200 users—450 employees,
1,100 advisors and 650 support staff

KEY APPSG Suite, Slack, Zendesk,
Gatekeeper, Outlook Web Access,Smarsh, AdvisorLinc

CHALLENGES
Heightened regulatory scrutiny
Need to improve security ofinformation accessModern infrastructure tosupport scale and agility

SOLUTION
IAM solution with AD sync andMFA for internal and external users
Custom SAML connector,role-based access control

RESULTS
Strong office user and field adoption
IT ease of use, administration
Smooth rollout withProfessional Services

Lincoln was looking to give end users easy access to a single pane viewof all apps relevant to them, with secure, role-based access control via acentralized platform. Rao wanted to maintain the ease of use advisors wereaccustomed to with AdvisorLinc, while adding security and multi-factor
authentication (MFA).
“As we sought to create an identity management system, we realized theenormity of potentially having to manage thousands of identities acrossseveral internal applications. It would have been a huge effort to build andmanage ourselves, given all the other priorities at that time. So we needed
something that was universally accepted, and started to evaluate
OneLogin,” says Rao.

SOLUTION“OneLogin was very helpfulin providing us a free trial,
so we could build aprototype. This was very
important to us, that wewere able to test everything
and ensure it worked. We

To tackle the goals, business and technical requirements, and evaluation
process, in addition to his own staff, Rao assembled a task force at
Lincoln which included:

could actually see an end• Chief Information Security Officer: penetration testingand vendor security

before we purchased.”• Product and software engineering: ownership and detailed
knowledge of internal applications• Head of IT operations: ownership of IAM solution, proof of concept• VP Application Development: strategic perspective, integration,
viability of solution.
Security, Prototype and Responsiveness
The team found that most of the cloud apps they were using, including
G Suite, Slack, and Zendesk, had OneLogin SAML connectors prebuilt and ready to go. So once they downloaded and configured theOneLogin instance, “it was very easy to get everyone underneath thesecurity umbrella. We did a thorough evaluation of OneLogin, including
penetration tests,” says Rao.
“OneLogin was very helpful in providing us a free trial, so we could build
a prototype. This was very important to us, that we were able to test
everything and ensure it worked. We could actually see an end product,
working for us even before we purchased, so that was pretty important.
OneLogin was very responsive throughout, even providing us with advice
to customize some of the apps, and that basically made this compellingfor us,” states Rao.
Reflecting on the importance of app integration, Rao continues, “Thewide acceptance of SAML apps by OneLogin was critical. Our advisor
portals are internally built and on-premises applications. The ability toconfigure a custom SAML connector for our in-house application reallyworked out. Also, we used OneLogin itself to configure Smarsh, which isa big regulatory need in the broker dealer industry.”O N E LO G I N . C O M

product, working for us even

Implementation and Rollout“The ability to roll out in groups is another big plus for OneLogin.
With so many tools out there, it’s all or nothing. We carefully
categorized users, mapping them into various roles and groups, so wewere able to gradually roll this out, on budget, without causing a lot ofdisruption in the field. For an organization this large, that was really theicing on the cake,” observes Rao.
“We have a single directory because the majority of our in-houseapplications were already using Windows AD-based authentication.
So it was easy for us to take our entire directory and sync it up
through OneLogin and available to use there. When we implementedOneLogin, that aspect became relevant to use across all internalapps,” recalls Rao.

“Ultimately, the fundamental

Professional Services and MFAplug in all of our apps. ”

Rao wanted to ensure that the rollout to the field, particularly OneLogin
Protect for MFA, was completed in a non-disruptive manner, so Lincoln
engaged with OneLogin Professional Services. They worked together,scheduling weekly calls to identify and prepare apps for integration,and rolled them out methodically, starting with IT to ensure thateverything worked. Onboarding other divisions within company offices
came next, and finally field users in different groups. For Lincoln’sinternal application, the initial roll out was single factor. Once everyone
had adapted to it, they began the MFA rollout accordingly.
“Because of how we used user mappings in OneLogin and configuredthem, it was really easy for us to provision them into the right group,and give them immediate access,” states Rao.

RESULTS“Ultimately, the fundamental reason to select, and the greatest benefit
to using OneLogin is that it was simple enough for us to plug in all ofour apps. For IT, it is really easy for us to administer, and from a field
perspective, we have a very high level of usage, with ease of use being theprimary driver,” says Rao.
“Similarly, when we were offboarding users, we immediately needed toterminate access, it was very easy to just go into OneLogin and deactivate
the profile so that they no longer had access to anything. The ease ofuse has been the biggest factor in getting this rolled out across theenterprise,” continues Rao.
“Lincoln is in the middle of a technology transformation, including ourapplications infrastructure, and data center. OneLogin was a good fit interms of being able to use the solution, because it is a key part of both
our transformation as well as a security mindset. And while it has
definitely increased IT and user efficiency, because we’re planning todouble in size, OneLogin was much more about helping us to scalethan cost savings,” says Rao.

O N E LO G I N . C O M

reason to select, and thegreatest benefit to using
OneLogin is that it was
simple enough for us to“In financial services, you often hear a lot of negative feedback frompeople when rolling out changes they don’t see as helpful. When we rolled
out OneLogin, they just were able to use it and go through that adoption
process. That is a testament to the simplicity and ease of use of OneLogin,”concludes Rao.

About OneLogin, IncOneLogin is the leader in Unified Access Management, Enabling
Organizations to Access the World™. OneLogin makes it simpler andsafer for organizations to access the apps and data they need anytime,everywhere. The OneLogin Unified Access Management Platformsecures millions of identities for thousands of companies around theglobe, spans both cloud and on-prem environments, and unifies allusers, devices, and applications to transform enterprises. We areheadquartered in San Francisco, California. For more information, visit
www.onelogin.com, our blog, Facebook, Twitter, or LinkedIn.

O N E LO G I N . C O M