Challenge
The university needed a scalable way to manage identities across students, faculty, staff, and alumni while reducing manual provisioning and administration. Identity data resided across multiple systems, making it difficult to maintain consistency, automate lifecycle events, and deliver secure access at scale. The institution required a solution capable of leveraging Workday SIS as a trusted source of identity data while supporting lifecycle-driven identity management throughout the user journey.
Solution
Implemented the BeyondID Workday SIS Connector
BeyondID utilized its Workday SIS Connector to integrate Workday SIS with Okta, enabling identity synchronization, attribute mappings, user imports, user updates, and validation across systems. The connector streamlined identity data flows and established Workday as an authoritative source for student and workforce identities.
Configured Event-Based Identity Lifecycle Automation
The team designed and configured Joiner, Mover, and Leaver (JML) workflows that responded to identity events and automatically executed user creation, user updates, and lifecycle-driven actions within Okta.
Connected Workday Identity Events to Downstream Systems
Workflow automation was configured to trigger downstream actions including Active Directory account creation, attribute updates, and group membership assignments based on identity data and lifecycle changes.
Centralized Identity Data Using Workday as an Authoritative Source
Workday SIS, Active Directory, and Google Workspace identity data were consolidated within Okta, creating a unified identity model for managing students, employees, and alumni.
Implemented SSO, MFA, and JIT Provisioning Controls
The team implemented Single Sign-On, delegated authentication, Duo MFA integration, policy configuration, and JIT provisioning capabilities to modernize authentication and strengthen security controls.
Migrated Identity Data from NetIQ to Okta
BeyondID conducted discovery, schema reviews, attribute mapping, Okta schema updates, CSV-based migrations, import validation, and testing to support the transition of identities from the legacy NetIQ environment into Okta.
Designed Target-State Identity Architecture
Discovery sessions, requirements workshops, user stories, architecture design activities, and solution sequence diagrams were used to define a scalable identity operating model aligned with the university’s modernization objectives.
Impact
Created a Unified Identity Experience Across the University
Students, faculty, staff, and alumni could be managed through a centralized identity ecosystem, reducing fragmentation across previously disconnected systems.
Reduced Manual Identity Administration
Automated lifecycle processing minimized the number of manual tasks required to onboard users, manage identity changes, and maintain access throughout the user lifecycle.
Improved Operational Efficiency for Identity and Access Management
Standardized identity processes and centralized administration enabled the university to manage digital identities more consistently and at greater scale.
Strengthened Security and Access Governance
Centralized authentication policies, stronger access controls, and automated identity management improved visibility and governance across the identity ecosystem.
Enhanced User Access and Self-Service Capabilities
Streamlined authentication experiences reduced friction for users while providing more consistent access to university resources.
Created a Future-Ready Identity Automation Framework
By establishing Workday SIS as a trusted identity source and automating lifecycle processes, the university gained a scalable framework for future identity modernization, application onboarding, and governance initiatives.
