Accelerating Compliance Maturity With
Converged IGA &
AAG

Saviynt's cloud-native IGA and AAG solution — providing fine-grained access entitlements and cross-application separation of duties (SoD) controls to meet changing SOX compliance requirements.

A world leader in developing and commercializing innovative therapies for rare diseases, this biotech company is a mission-driven organization that takes pride in creating pioneering treatments that save lives and better the current standard of care. Challenged to meet compliance requirements and rapid growth, the company needed to modernize its identity and access governance strategy. 

With Saviynt’s solution, the company has automated access provisioning for a full suite of business-critical applications and more than 5,000 global employees – all while reducing third-party technical support and administrative labor costs by approximately 50%.

Balancing Compliance Requirements with Rapid Growth

After its Oracle E-Business Suite failed multiple audits, IT security and compliance leaders knew they needed to find a new identity governance and application access solution.

With massive growth on the horizon – and two up-and-coming new drugs in its pipeline – the company needed to scale its identity program quickly: it expects to double the size of its staff outside of the United States within the next three to five years. Meanwhile, its lean identity and account management team must handle identity lifecycle management and provisioning across its dynamic IT environment without increasing headcount or demand for third-party support. The team needed to automate Active Directory governance, SOX compliance, and Joiner-Mover-Leaver access provisioning.

Reducing Administrative Overhead and Labor Costs

The IT team implemented Saviynt’s cloud-native Identity Governance and Administration (IGA) and Application Access Governance (AAG) platform. With this solution in place, they have:

• Passed all SOX compliance audits even though the company’s required audit frequency has doubled
• Enhanced visibility and adherence to regulatory frameworks by automating access management and compliance controls
• Integrated key business solutions including Oracle ERP, Salesforce, Office 365, SharePoint, Concur, and Everbridge applications managed in Active Directory (AD)
• Leveraged behavioral analytics for enhanced user security 
• Enjoyed administrative ease-of-use and simple configuration – with virtually no customization