June 17, 2025
Case Study: Identity and Access Management (IdAM) Transformation Client: A UK Government Agency Delivery Partner: Regal Evolve & Associates Challenge: Manual, inconsistent employee onboarding and user access management processes The Opportunity The Agency was undergoing a significant digital transformation, and a key part of this programme involved simplifying and standardising the onboarding, movement, and offboarding of employees across roles, departments, and exits. The legacy process was highly manual—reliant on hand-completed paper forms sent to IT helpdesks to request user account changes. This led to several operational and security risks: Inconsistent HR data quality Security weaknesses , including lingering access for users who had changed roles Ambiguity in job roles and corresponding system access requirements Misconfigured permissions with some users gaining inappropriate elevated privileges Lack of auditability , impairing GDPR compliance Following detailed consultation with the Agency, Identity and Access Management (IdAM) was identified as the most suitable solution. IdAM enables automated, secure access provisioning based on verified digital identities, limiting access to what is strictly necessary. Regal Evolve & Associates was selected through a competitive tender process to design and deliver the solution. Our Approach At Regal Evolve & Associates, we deliver every Managed Professional Service under three core principles: Client Enablement Teams of Excellence Impartiality A dedicated Technical Director was appointed to oversee the programme, ensuring a clear understanding of the business context, continual progress updates, and direct engagement with key stakeholders. IdAM programmes are inherently complex—touching every user, system, business process, and IT asset across the organisation. This level of integration requires careful alignment across HR, IT, governance, and operational departments. To meet this challenge, Regal Evolve & Associates deployed: A Business Analyst A Senior Solutions Architect Both experts were co-located with the Agency’s internal teams within four weeks of request, enabling immediate collaboration and knowledge transfer. Our Solution Our team conducted workshops and technical assessments with all key stakeholders. This informed the production of a comprehensive Discovery Report, which included: Key Findings Current-State (“As-Is”) Assessment Target-State (“To-Be”) Design Solution Options Final Recommendations This modular, costed plan gave the Agency clear visibility of the issues, proposed actions, timelines, and required resources. One of the most critical issues uncovered was data quality within the Agency’s HR system: Many user records lacked job titles, department assignments, or line manager references. This incomplete data made synchronisation with Active Directory —and therefore IdAM—impossible. To resolve this, Regal Evolve & Associates engaged senior leadership to s treamline and standardise job roles across the Agency , working closely with HR and department heads. Once finalised, these revised job roles will be updated in Oracle Fusion and synchronised with Active Directory to support automated role-based access control. The Outcome The discovery phase is now successfully complete. With full stakeholder engagement and technical alignment, Regal Evolve & Associates is preparing to implement the IdAM solution, delivering benefits including: Effective records management – enabling timely GDPR data requests Improved security – full lifecycle access control aligned to employee roles Role-Based Access Control (RBAC) – system permissions driven by verified job roles Privileged Access Management (PAM) – strict oversight and auditing of admin rights Microsoft Identity Manager – seamless synchronisation between HR and IT systems Public Key Infrastructure (PKI) – secure, encrypted access to critical systems Workflow-driven approvals – enhancing accountability and traceability Reduced IT helpdesk burden – fewer manual requests and faster resolution Improved user experience – e.g., self-service password resets Increased productivity – secure access from day one in the correct role Greater visibility – into how identity and access are governed Agency-wide