A global consumer products brand that had gone more than ten years without a formal access review used a BalkanID managed IGA service to remediate audit findings, then extended it to HR-driven joiner and leaver automation.
Systems
BambooHR, Active Directory with Entra ID, Oracle EBS on-prem (via on-prem agent), Salesforce, Shopify (multiple storefronts), SAP Concur, supply chain and integration platforms, Jira Service Management, Microsoft Teams
Drivers
Internal audit findings, mainly terminated employees who kept access to ERP and commerce systems
Challenges before BalkanID
- No user access review had been performed in over a decade.
- The HR system and the directory were not connected, so leavers kept accounts in ERP, CRM and commerce systems.
- Oracle EBS responsibilities had grown without role design, which created dormant accounts and risky role combinations.
- A small IT team could not run a full review program on its own.
What BalkanID delivered as a managed service
- BalkanID ran campaign creation, reviewer assignment, notifications, escalations from manager to director, remediation tracking, weekly status reports and the final audit report.
- Remediation raises one Jira ticket per app per campaign, so every revocation is traceable.
- An on-prem agent brings Oracle EBS into scope, alongside SaaS and commerce apps.
- Oracle EBS RBAC review: dormant accounts, single-holder responsibilities, redundant groups and duplicate access paths.
- Lifecycle playbooks from BambooHR to AD and Entra ID: joiner and leaver automation, email creation, and birthright groups by department and title. BalkanID also became the system of record for contractors.
Outcomes
- Review covered all critical apps. Oracle EBS RBAC review sent users dormant for more than a year to cleanup, and flagged redundant groups and duplicate access points.
- A sensitive treasury role was found with a terminated employee still assigned.
- HR-driven joiner and leaver automation live within six months of signing.
- The customer's IT leader and internal audit now presents BalkanID as the reference model to sister companies in its holding group.
.svg)
