Blog

SUCCESS STORy

IAM Services and waave for a Global Industrial Company

Comprehensive IAM services for a global industrial leader:

With our innovative solution waave, we secure Identity and Access management for over 30,000 employees in more than 100 countries.

30000

employees working all over the world

100

countries and more whose IT admins use waave

Services and Solution

Comprehensive IAM services with waave for 30,000 employees worldwide

We are proud to support a leading global industrial company with our first-class IAM services.

Working closely with the internal IAM team, we continuously implement new IAM features and ensure smooth operations for over 30,000 employees. We use our IAM solution waave to achieve this.

Summary

Identity Management

Identity management for more than 30,000 employees
Working closely with the internal IAM team, we use waave to provide identity and access management for more than 30,000 employees in over 100 countries.

waave is used to manage identities and resources such as shared mailboxes and distribution groups. Most identities are managed via an interface to SAP SuccessFactors, which means that waave executes identity lifecycle processes such as joiners, movers, and leavers fully automatically. However, some identities, such as accounts for external employees, are not managed using SAP SuccessFactors. Such identities can be efficiently created, edited, or deleted via the waave user interface.

SAP SuccessFactors

HR Driven Identity Management
Our customer uses SAP SuccessFactors as their HR management software. waave retrieves HR data directly from SAP SuccessFactors and executes joiner, mover, and leaver processes fully automated.

If a data change has a major impact on an identity, such as a change of the login name or email address, waave generates an approval task. This allows IT managers to coordinate this data change with the corresponding employee.

Shared Mailboxes

Management of Shared Mailboxes
IT administrators can manage shared mailboxes via a waave user interface. At least two owners and the responsible subsidiary are defined for each shared mailbox. This clearly defines responsibility for the mailbox. Based on business rules, waave also generates a unique identifier and an email address for the mailbox. Validations ensure that naming conventions are adhered to. Options such as Send on Behalf or Full Access are additional settings that can be configured via the user interface, including the option to apply these changes via bulk update.

Entra ID & Distribution Groups

Entra ID Groups & Distribution Groups
IT administrators can use the waave user interface to create new Entra ID groups or distribution groups, or to modify or delete existing ones. Business users also have access rights, however members of this role can only administer group memberships. Memberships can be added individually or via a bulk update. At least two owners and the responsible subsidiary are defined for each group to ensure transparency. waave also generates a unique identifier and, for distribution groups, the email address. Validation ensures that naming conventions are adhered to.

Service Accounts

Service Accounts
Cloud and On-Premises service accounts are managed by IT administrators using waave. waave generates unique identifiers and user principal names for the accounts. In addition, waave ensures that the defined naming conventions are adhered to thanks to extensive validations. Furthermore, the assignment of a manager and affiliation to a subsidiary clarifies responsibility.

ServiceNow, Salesforce, MuleSoft

API Integrations
Internal applications, such as ServiceNow or Salesforce, can access identity data from waave via the MuleSoft API Management Suite. waave provides data on personal identities and resources such as shared mailboxes or distribution groups. MuleSoft uses waave's extensive REST API features for this purpose.

Fine granular waave access

Fine granular waave access
Access to waave features is finely granular. This includes restrictions at the user level, so that IT administrators can only perform actions for identities for which they have the appropriate rights. Access rights for IT administrators are assigned via the waave Role Model (RBAC/ABAC).

Additional waave Features

Additional waave Features
Various other waave features support the highly automated identity management of this large company. For example, unique values such as user IDs, login names or email addresses are generated by a waave module, which also takes into account values such as email addresses that are not managed by waave to ensure complete uniqueness.