Customer Success Story Identity Manager Archdiocese of Munich and Freising

The Archdiocese of Munich and Freising wanted an identity management solution able to give around 8,000 employees and volunteers easy access to emails, calendars and documents without impacting security. By implementing NetIQ® Identity Manager, the Archdiocese gained a powerful identity-powered security and collaboration environment, which enables administrators to automatically grant and enforce the appropriate access rights to the appropriate people.

Overview to improve communication, work processes and The Archdiocese of Munich and Freising is an collaboration between parishes and dioceses. ecclesiastical territory of the Roman Catholic To enable smooth and quick cooperation across Church in Germany. The Archdiocese supports organisational borders, we needed to simplify pastoral work across the region in local parishes. and streamline our internal processes and re- think how we could ensure efficiency in man- At a Glance Challenge aging large numbers of people with different Industry To enable efficient collaboration between about access rights.” Other 8,000 employees and volunteers in the diocese, administrators need to ensure that everyone has Solution Partner Together with NetIQ Platinum Partner IS4IT, access to all relevant information. Manual pro- IS4IT cesses driven by printed forms were slow and the Archdiocese of Munich and Freising im- lacked the necessary transparency for monitor- plemented Identity Manager and redesigned Location ing and optimising the administrative workflows. provisioning and other user administration Munich, Germany workflows. The solution has been developed Günther Penninger, Head of IT at Archdiocese of and continually fine-tuned to meet the organ- Challenge Munich and Freising, said: “The Catholic Church isation’s specific identity management needs, At the Archdiocese of Munich and Freising, is one of the oldest institutions in the world and which are as diverse as the many individuals Germany, significant administrative effort was is now increasingly embracing new technology who work within the diocese. needed to enable efficient and secure collaboration between about 8,000 employees and volunteers The Archdiocese of Munich and Freising runs across the entire organisation. Identity Manager in its own data centre in a Solution “Previously, the process to set up virtual environment based on VMware vSphere The Archdiocese teamed up with NetIQ partner a new user was slow and printed and virtual instances of SUSE Linux Enterprise IS4IT and implemented Identity Manager to forms circulated around various Server. Two people manage the production and automate the identity lifecycle and enable identity- departments. Today, staff in local quality management systems to ensure reliable powered security that accelerates processes and operation. The organisation has connected a simplifies user provisioning. parishes can request accounts for range of systems to the identity management volunteers online.” solution including HR software, collaboration Results solutions, travel expense management, the vir- + Enables fast user account administration GÜNTHER PENNINGER tual private network management, file servers + Automates identity management processes, saving time and cutting error rates Head of IT and many more. Archdiocese of Munich and Freising + Improves security by detecting, highlighting and closing obsolete user accounts With Identity Manager the provisioning of user accounts is more structured, and administrative processes are more clearly defined and automated.”

GÜNTHER PENNINGER Head of IT Archdiocese of Munich and Freising

www.netiq.com

When deploying the new identity manage- enforced and orphaned accounts are detected ment solution, the Archdiocese of Munich and and blocked quickly. The elimination of manual Freising took the opportunity to define, stan- processes saves time and reduces the possibil- dardise and optimise its processes. Identity ity of mistakes. Denmark lifecycles have been codified and the different +45 45 16 00 20 phases have been documented. In addition, a Günther Penninger said: “Using Identity Manager­ France range of time-consuming manual tasks have we have structured existing workflows and es­ +33 1 55 70 30 13 been automated. tablished new, more automated administrative Germany processes. Previously, the process to set up a +49 89 42094 0 Günther Penninger said: “The collaboration with new user was slow: printed forms circulated Italy our trusted partner IS4IT could not have been around various departments and manually +39 02 366 349 00 better. The implementation of Identity Manager processing updated or new data and keying went smoothly and IS4IT is always open to our Netherlands them into different systems could take several +31 172 50 55 55 ideas, helping us further develop our capabilities. days. Today, staff in local parishes can request Poland A key to success was that the project manager accounts for volunteers online. Thanks to au- +48 22 537 5000 from IS4IT, Holger Strickling, did an outstanding tomation, requests are now processed much job combining technical and process compe- faster–within about 15 minutes.” Portugal tence into successful project leadership.“ +55 11 3627-0900 Topics such as process efficiency, communi- Spain He added: “Benefitting from our partner’s exper- cation and traceability that have long been a +34 91 640 25 25 tise, we are working together to improve data focus for businesses are now also becoming Sweden quality across our systems and applications to important in the Catholic Church. To support +46 8 752 25 00 enable a greater degree of automation and to these organisational changes, embracing new reduce the support workload.” NetIQ technologies is vital. Worldwide Headquarters Houston, Texas Results Günther Penninger said: “Having successfully 713 548 1700 Using Identity Manager gives the Archdiocese of automated workflows with the local parishes, 888 323 6768 Munich and Freising the flexibility to manage a we now want to take the next step, creating www.netiq.com highly dynamic user landscape and to apply iden- a comprehensive model for role-based access tity-powered security to its application landscape. management and rolling the solution out to up to 15,000 users. This will help us to ensure The organisation automatically provisions ac- that staff and volunteers have access to the counts for precisely those people who need resources they need to deliver a great service them, and removes access rights when they are within our diocese.” no longer required. Access rights are rigorously

568-EE1051-001 | Q | 11/15 | © 2015 NetIQ Corporation and its affiliates. All rights reserved. NetIQ and the NetIQ logo are trademarks or registered trademarks of NetIQ Corporation in the USA. All other company and product names may be trademarks of their respective companies.