Implementation · Station 3 on the IAM journey
From product choice to secure operations
An IAM platform only creates value once it's in operation and the processes are followed. We implement with certified specialists on our partner products – structured, transparent, and focused on minimizing risk along the way.
Approach
Implementation is a change project – not just an IT project
Most IGA projects that fail don't fail on the technology. They fail on unclear requirements, missing buy-in, and a role model the business doesn't recognize. That's why we always implement from the starting point of your processes and organization – the technology is the means.
If you come from an IGA Ready engagement, your requirements specification, process model, and implementation plan are reused directly. If you arrive with a product already chosen, we start with a short design phase that builds the same foundation.
See our partner productsWe implement, among others
- Omada Identity – cloud and on-prem IGA.
- One Identity Manager – feature-rich enterprise IGA.
- One Identity Safeguard – the PAM suite.
- Pointsharp – cloud IGA, IGA for SAP, AM, and PKI.
The engagement
How we deliver
- Design and planning
Solution design, architecture, and a delivery plan, with clear milestones and responsibilities.
- Platform setup
Installation and configuration of the platform, cloud or on-prem, following the vendor's and our own best practice.
- Processes and integrations
JML processes, role model, approval flows, and integrations to HR and target systems, delivered in prioritized stages, so value arrives continuously.
- Testing and go-live
Structured testing with the business, a pilot phase, and a controlled go-live.
- Handover
Documentation, training, and handover – to your own team or to our Managed Service.
Role modelling
The role model decides whether the implementation holds
Most IGA implementations stall at the point where entitlements have to be translated into roles. Without a model the business recognizes, every assignment stays a manual decision, and the platform ends up as an expensive ordering system.
Role Ready is our engagement for exactly that work, and it can run inside the implementation as a track of its own. Data proposes the roles through role mining, the business validates and decides them, and the model goes straight into operation on the platform.
Read about Role ReadyThe track delivers
- Role catalogue: roles with a name, a purpose, and a named owner behind each one.
- Assignment rules: which roles follow from position, department, and type of employment.
- Exceptions: the access that stays manual, and who approves it.
- Pilot before rollout: the model is tried in one department before it goes live across the organization.
Non-human identities
Service accounts and keys belong in the project from day one
In most environments there are more non-human identities than employees, and few of them have an owner. Bring them in only after go-live, and you are left with a governance model that covers half your identities.
Service accounts
The accounts behind integrations and scheduled jobs. We map them, put an owner on each one, and place them under the same lifecycle as employees.
API keys and secrets
Keys and secrets that often live in configuration files and scripts. They are collected in one place, given an expiry date, and included in recertification.
Certificates and AI agents
Certificates that expire at an inconvenient moment, and the new agents that act on their own. Both need an owner and access that can be withdrawn.
Why IAM Group
Specialists – not generalists with an IAM course
- IAM is all we do. Our consultants have years of experience with exactly the platforms we implement.
- An advisor's eye in the delivery: we speak up when the requirements should be challenged, even mid-project.
- Experience from both sides of the table: we've evaluated the products in pre-implementation projects and know their strengths and limitations in practice.
- Value in stages: we deliver in prioritized steps, so you see results long before the project ends.
Have you chosen a product – or do you need the final basis for the decision?
We help in both cases: implementation of your chosen platform, or an IGA Ready pre-implementation project that makes the choice safe.