The University of Leeds makes a difference with identity security

Having a solid identity security strategy in place for an organization like the University of Leeds is critical for protecting sensitive data, from student records to financial data to intellectual property, as well as meeting compliance requirements, safeguarding its reputation, and reducing cybersecurity threats.  

Recognizing that need years ago, the University developed its own identity and access management solutions, which grew organically as the University grew and new needs were identified. But over time, the system became more complex to update, more challenging to keep running, and wasn’t providing a secure single identity.  

“We were finding that we didn’t have a single source of identity,” said Phil Worsley, Identity and Access Management Lead, University of Leeds. “Applications were simply linking to anything that could provide identity.” 

Key identity issues confronting the University included the lack of a single source of identity, limited control over joiners, movers, leavers, and a need to move toward role-based access.  

That’s when the University decided to modernize its homegrown identity security solution. The University wanted a more strategic approach to bring identity security under control in an auditable way.  

Using SailPoint to manage identity security properly 

After the COVID pandemic, the University decided to invest heavily in a wholesale update of its IT capabilities as part of the “Be Safe” initiative. It was a fundamental change in how the University operates. 

The University brought on Accenture as its solution partner for the program and embarked on a discovery exercise to nail down the solution details and roadmap. After evaluating an on-premises identity security product, Worsley and his team decided the University really needed to commit to a cloud-based solution for future flexibility, growth, and longevity.  

As a result, the University of Leeds chose SailPoint SaaS solution for its identity security strategy. In addition to serving as a single source of identity, the University can use SailPoint to start automating processes such as onboarding or offboarding, where previously, there was a lot of manual work required.  

“SailPoint allows us to really start managing identity security properly,” said Worsley. “Now we have control over identity.” 

With SailPoint’s automation capabilities, the University can put business leaders in charge of defining identity access and empowering more automation for joiners, movers, and leavers. 

Building on a more secure future with SailPoint 

According to Worsley, one helpful practice for successfully deploying the University’s new SailPoint identity security solution was making sure to engage with as many other universities as possible so they could learn from how they were approaching identity security and how it might or might not apply to the needs of the University of Leeds.  

By using SailPoint to provide a single source of identity, the University of Leeds now has a strategic identity security platform to build on. In addition to streamlining processes, eliminating manual work, improving compliance, and reducing errors through the new automation processes it’s currently setting up, the university’s SailPoint deployment also delivers other benefits.  

Worsley’s team is evaluating all the ways the University can leverage SailPoint’s capabilities, including role-based access, recertification, and artificial intelligence that can learn from behaviors.  

“There’s an awful lot we can do with SailPoint, and it’s just the start of the journey for us,” said Worsley. “It’s a really, really interesting time for us.”