Absa Bank transforms its non-employee identity management
Absa Bank is a pan-African financial institution with between 52,000 and 65,000 identities under management at any one time. The bank services customers across the continent and works with a range of employees, partners, and third parties globally. It has considerable governance and regulatory responsibilities, including compliance with GDPR and POPIA.
Challenge
Absa Bank’s model for identity management for non-employees was centered around access provisioning only, which did not fully support the requirement for identity establishment before provisioning. Since all access provisioning was managed via Absa Bank’s HR system, it was determined that this process was over-governed for third party identities. Additionally, there was an ongoing risk associated with the prolonged availability of systems and services beyond their intended lifespan, exacerbated by the absence of regular access certification for third parties.
Solution
Absa Bank adopted SailPoint Non-Employee Risk Management as a core architecture component to establish and onboard third party non-employee identities. Once fully enabled the solution will support the onboarding of third party and federated third party identities as a pivotal point for their identity security program.
Industry
Banking
Company size
35,000+ employees
Partner
Altron TMT Ltd
SailPoint’s Non-Employee Risk Management solution has given us a single source of truth for a range of identities, from fixed-term contractors to machines. This complements our identity management processes for employees, streamlining onboarding and provisioning while also improving security.”
Evan Fraser, Enterprise Architect, Absa Bank Limited
12,000
non-employees empowered with secure identities*15 days
onboarding time removed for quicker third party access*>$300
approximate saving per identity onboarded**1 October 2023