IdAM provides missing link to simplifying onboarding process at central Government Agency
Case Study: Identity and Access Management (IdAM) Transformation
Client: A UK Government Agency
Delivery Partner: Regal Evolve & Associates
Challenge: Manual, inconsistent employee onboarding and user access management processes
The Opportunity
The Agency was undergoing a significant digital transformation, and a key part of this programme involved simplifying and standardising the onboarding, movement, and offboarding of employees across roles, departments, and exits.
The legacy process was highly manual—reliant on hand-completed paper forms sent to IT helpdesks to request user account changes. This led to several operational and security risks:
- Inconsistent HR data quality
- Security weaknesses, including lingering access for users who had changed roles
- Ambiguity in job roles and corresponding system access requirements
- Misconfigured permissions with some users gaining inappropriate elevated privileges
- Lack of auditability, impairing GDPR compliance
Following detailed consultation with the Agency, Identity and Access Management (IdAM) was identified as the most suitable solution. IdAM enables automated, secure access provisioning based on verified digital identities, limiting access to what is
strictly necessary.
Regal Evolve & Associates was selected through a competitive tender process to design and deliver the solution.
Our Approach
At Regal Evolve & Associates, we deliver every Managed Professional Service under three core principles:
- Client Enablement
- Teams of Excellence
- Impartiality
A dedicated Technical Director was appointed to oversee the programme, ensuring a clear understanding of the business context, continual progress updates, and direct engagement with key stakeholders.
IdAM programmes are inherently complex—touching every user, system, business process, and IT asset across the organisation. This level of integration requires careful alignment across HR, IT, governance, and operational departments.
To meet this challenge, Regal Evolve & Associates deployed:
- A Business Analyst
- A Senior Solutions Architect
Both experts were co-located with the Agency’s internal teams within four weeks of request, enabling immediate collaboration and knowledge transfer.
Our Solution
Our team conducted workshops and technical assessments with all key stakeholders. This informed the production of a comprehensive Discovery Report, which included:
- Key Findings
- Current-State (“As-Is”) Assessment
- Target-State (“To-Be”) Design
- Solution Options
- Final Recommendations
This modular, costed plan gave the Agency clear visibility of the issues, proposed actions, timelines, and required resources.
One of the most critical issues uncovered was data quality within the Agency’s HR system:
- Many user records lacked job titles, department assignments, or line manager references.
- This incomplete data made synchronisation with Active Directory—and therefore IdAM—impossible.
To resolve this, Regal Evolve & Associates engaged senior leadership to streamline and standardise job roles across the Agency, working closely with HR and department heads. Once finalised, these revised job roles will be updated in Oracle Fusion and synchronised with Active Directory to support automated role-based access control.
The Outcome
The discovery phase is now successfully complete. With full stakeholder engagement and technical alignment, Regal Evolve & Associates is preparing to implement the IdAM solution, delivering benefits including:
- Effective records management – enabling timely GDPR data requests
- Improved security – full lifecycle access control aligned to employee roles
- Role-Based Access Control (RBAC) – system permissions driven by verified job roles
- Privileged Access Management (PAM) – strict oversight and auditing of admin rights
- Microsoft Identity Manager – seamless synchronisation between HR and IT systems
- Public Key Infrastructure (PKI) – secure, encrypted access to critical systems
- Workflow-driven approvals – enhancing accountability and traceability
- Reduced IT helpdesk burden – fewer manual requests and faster resolution
- Improved user experience – e.g., self-service password resets
- Increased productivity – secure access from day one in the correct role
- Greater visibility – into how identity and access are governed Agency-wide

