San Luis Obispo County achieves automation, data accuracy and scalability

In the dynamic world of public sector operations, managing identities across thousands of employees and dozens of departments is a critical yet complex undertaking. For San Luis Obispo County, the distributed nature of its operations, diverse workforce, and stringent security requirements created significant challenges. With 24 departments operating independently—each with unique missions and varying levels of technical sophistication—standardizing identity management was no small feat.

"Each department is like its own business," explained Troy Bivens, Chief Information Security Officer of San Luis Obispo County. "Some departments have seasonal employees, like our Parks Department, or contingent staff, like election workers. Others, like our Health and Sheriff's Departments, handle highly sensitive data. Balancing these diverse needs while maintaining security and efficiency is a constant challenge."

Troy Bivens has been a driving force behind the county's journey to modernize its identity governance. Recognizing the inefficiencies and risks posed by manual processes and inconsistent data, he championed the adoption of SailPoint. His team's hands-on approach and deep understanding of the county's unique challenges ensured a successful implementation that has transformed how the county manages identities across its 3,000 employees.

Before SailPoint, San Luis Obispo County faced several challenges that hindered its operational efficiency and security posture.

Manual processes create inefficiencies

Onboarding new employees required IT, HR, and financial teams to manually create user accounts, assign licenses, and provision access across systems like Active Directory and SAP. This process took 75 minutes per employee and often left new hires unable to access critical systems, such as timesheets, on their first day. This not only delayed productivity but also created a poor first impression on new employees.

Inconsistent identity data posed risks

With 24 departments operating independently, identity data was often inconsistent across systems. Departments with more resources built their own homegrown solutions, while others relied on central IT, leading to disparities in data quality. Stale accounts and over-provisioned access were common, requiring hundreds of hours annually for audits and cleanup.

Future ERP migration added urgency

With plans to migrate to a new ERP system, the county needed clean, accurate identity data to ensure a smooth transition. Leadership recognized that without addressing these challenges, migration could be fraught with delays and complications. These challenges underscored the need for a modern, automated identity governance solution that could streamline processes, improve data accuracy, and enhance security.

Why San Luis Obispo County chose SailPoint

When San Luis Obispo County set out to modernize its identity governance, the team knew they needed a solution that could address their unique challenges while preparing them for future growth. After a thorough evaluation process, SailPoint emerged as the clear choice for its robust capabilities, scalability, and alignment with the county's needs. "We spent a lot of time talking with Gartner and InfoTech to understand the market," shared Troy. "SailPoint consistently stood out as one of the best in the business, both in terms of capabilities and reputation."

One of the key factors in the decision was SailPoint's ability to automate identity lifecycle management. "We needed a solution that could eliminate the manual, time-consuming processes that were slowing us down," explained Troy. "SailPoint's automation capabilities were a gamechanger, allowing us to provision and deprovision accounts seamlessly while ensuring accuracy and security."

Another critical factor was SailPoint's ability to integrate with the county's existing systems, including NEOGOV, SAP, and Active Directory. These integrations ensured that identity data remained consistent and accurate across all systems, a necessity for both day-to-day operations and the county's planned migration to a new ERP system. "We knew that clean, accurate identity data was essential for our future ERP migration," Troy shared. "SailPoint gave us the tools to achieve that level of precision."

To ensure a successful implementation, the county partnered with ProofID, a trusted SailPoint partner. ProofID provided critical guidance on data cleanup, attribute mapping, and phased onboarding, helping the county navigate its complex environment and achieve its goals.

Boosting efficiency, security, and compliance

Time savings and improved efficiency

Onboarding time for new hires has been slashed from 75 minutes per employee to just 5 minutes—a 93% decrease—saving an estimated 900 hours annually across onboarding and offboarding processes. Automated provisioning ensures that new hires have access to all necessary systems, including timesheets, on their very first day. "We've eliminated the bottlenecks that used to frustrate both employees and managers," shared Troy. "Now, employees can hit the ground running from day one, which is a huge win for everyone."

Enhanced employee experience

By eliminating delays in access provisioning, SailPoint has created a seamless and positive first impression for new employees. "Ensuring that employees can start work on minute one is super important," Troy emphasized. "It sets the tone for their experience with the organization and shows that we're invested in their success from the start." The county went from a process that took two weeks to grant access to time sheets down to just two minutes, highlighting how streamlined access provisioning has transformed the employee experience across the board.

Improved security posture

Automated deprovisioning has significantly reduced security risks by ensuring that accounts are promptly disabled when employees leave. This has also alleviated audit fatigue for the county's InfoSec team. "Knowing that our identity data is accurate and up to date gives us peace of mind," Troy explained. "We're no longer worried about stale accounts or over-provisioned access slipping through the cracks." Implementing SailPoint also surfaced outlier accounts which may not have resided in a primary HR system. By identifying a source of truth and provisioning from that source, SailPoint helped to close a significant gap.

Data accuracy and ERP readiness

Identity data accuracy reached an impressive 81% before onboarding the final two departments, streamlining the county's ERP migration to Workday. This level of precision has also improved the county's ability to generate reports and respond to audits. "Clean data isn't just about compliance—it's about making smarter decisions and being ready for what's next," Troy noted.

Cost efficiency

Accurate group memberships and provisioning have prevented unnecessary license costs for systems like AI tools, ensuring financial efficiency. "Every dollar counts in the public sector," Troy said. "By getting our provisioning right, we're not just saving time—we're saving money. We're being asked to do more with less, like all governments are. Empowering self-service and putting more control in the hands of the people who truly understand these systems was a key driver in implementing SailPoint."

Lessons learned and advice for others

San Luis Obispo County's transformation showcases the impact of preparation, collaboration, and strategic innovation. Reflecting on the journey, Troy shared, "You can't fix what you don't understand—cleaning up our data was one of the smartest decisions we made." He also emphasized the value of strong partnerships: "Having a trusted partner who understands your unique challenges is invaluable." Troy's advice for others embarking on similar journeys:

• Understand your data: Conduct audits to identify gaps and inefficiencies.
• Partner wisely: Work with experts who align with your goals and understand your environment, especially those from Human Resources and Financial Teams who understand people data and the processes involved when someone joins or leaves your organization.
• Start small, scale gradually: Focus on foundational capabilities before expanding to advanced features.

"With SailPoint, we've transformed identity management from a manual, error-prone process into an automated, efficient system," Troy shared. "This has saved time, improved security, and created a better experience for employees."