Okta

Albertsons Companies, one of the largest grocers in the US, serves over 30 million customers each week through 19 different banners. The company faced the challenge of shifting customer demands and the need to provide a seamless shopping experience, whether in-store, online, or mobile. Albertsons' customer demographics varied greatly, and the company needed to meet the diverse demands of its customers. The company had multiple user IDs and passwords, which increased the attack surface of its IT infrastructure, making it more vulnerable to breaches. Albertsons needed to create a seamless, consistent IT experience in both the four-wall and no-wall environments, while maintaining the look-and-feel of the individual banners. The organization saw it as an opportunity to offer their customers a better experience.

Athenahealth, a healthcare technology company, was facing challenges with its legacy infrastructure as it expanded its patient and practitioner base. The company had multiple account credentials for patients, and each practice had to register patients and store their data separately. This led to a complex and disjointed user experience. Furthermore, the company was dealing with the challenge of ensuring data accessibility while maintaining robust security. The company needed a solution that would reduce friction, improve user experience, and enhance patient outcomes without compromising on security. The challenge was to find a solution that could handle the sensitive and highly regulated data that impacts people's lives, while providing a seamless digital experience for users.

Zoom Video Communications, Inc., a leading enterprise video communications platform, experienced significant growth during the first months of the COVID-19 pandemic. This rapid expansion required a scalable and secure identity solution that would also provide a seamless user experience. Zoom's legacy identity management environment was not equipped to scale easily with the public cloud or to the hundreds of thousands of systems in use. The company needed a solution that could handle the immense growth while maintaining security and compliance standards. The challenge was to find a solution that could secure server access, alleviate the pressure on Zoom's data center operations team, and provide a seamless user experience to the millions of customers who rely on Zoom for work, education, and personal use.

Welocalize, a global translation and localization company, was facing a significant challenge in managing its client portal. The company supports and manages the globalization programs of numerous leading brands, providing a range of services including localization, digital marketing, patent translation, and AI-enabled services. This vast array of services led to a complex web of multiple users, logins, and entry points, which was not sustainable. The company's client portal housed several workstreams serving multiple stakeholders within one organization, containing sensitive and confidential data that needed stringent protection from both internal and external security breaches. The main targets of cybercriminals, usernames, and passwords, posed a significant threat to information security. While the portal required complex security measures, including granular security clearances for each user, Welocalize needed to avoid creating a frustrating and unnecessarily complex user experience.

Hewlett Packard Enterprise (HPE) is undergoing a significant transformation, aiming to transition all of its on-premises IT infrastructure products to cloud-based as-a-service offerings by 2022. This move is driven by increasing customer demand for cloud-based services. In 2019, HPE introduced GreenLake Central, a sub-brand that delivers consumption-based IT services, enabling customers to build a seamless experience between their public and private clouds. However, the GreenLake Central platform has significant identity requirements, such as the need to securely federate and authenticate various user types including administrators, support teams, customers, and partners—all within a single user interface. To meet these identity requirements, HPE needed an identity and access management (IAM) partner to help integrate enterprise identities and secure APIs.

Comcare, Australia's national authority for workplace health and safety, faced the challenge of modernizing its IT systems by moving all on-prem infrastructure to the cloud. This transition aimed to facilitate secure data storage, remote work, organization-wide visibility, and an improved user experience. A significant challenge was the need for a centralized identity solution to allow employees and external stakeholders to access applications from a single login, ensuring simple and complete deprovisioning of employees. The existing system had three types of identities managed by different policies, making it difficult to deprovision individuals and posing potential security risks.

In the past, fans had to log in to different customer portals to buy tickets or browse merchandise. Fans couldn’t set up a central profile to support their teams from their own, personal football hub. With features spread across separate platforms, the RBFA lacked a single view of fan activity. To create a user experience worthy of Belgium’s golden generation, and a richer football community with a 360-degree customer view for better insights, the RBFA decided to revamp its customer platforms with a digital transformation strategy in 2019. In addition to giving Belgian football fans a user experience to cheer about, the RBFA wants to empower employees and partners with streamlined access to internal applications, such as Office 365, while keeping security high. “We have dozens of internal applications with individual identity and access management flows, all processing sensitive information,” explains Cédric Brosens, Data Protection Officer at the RBFA. “Because our IT department doesn’t have the bandwidth or resources, we needed a centralised access management system.” Looking for a solution that tackles both customer and workforce identity challenges, the RBFA found the perfect match in Okta.

The City of Los Angeles faced challenges with its siloed legacy systems, which hindered the provision of secure and accessible digital services. The city's Information Technology Agency (ITA) aimed to modernize digital experiences, especially after the COVID-19 pandemic highlighted the need for efficient digital communication. The city needed a unified platform to connect its diverse departments and improve access to services for its four million residents. Security was a major concern, as the city is a target for cyber threats, and the existing systems provided varying levels of security and access. The ITA sought to create a framework that would allow the city to operate as a cohesive unit, providing a seamless and secure digital experience for constituents.

Takeda faced the challenge of managing complex and siloed identity processes across its diverse business units, which burdened patients, partners, and caregivers with fragmented digital experiences. The demand for simplified and secure digital interactions increased, along with the need to protect against security threats. As Takeda expanded through strategic mergers and acquisitions, the complexity of its technology and identity management processes grew, necessitating a unified approach to identity management. The company needed to centralize identity across its digital ecosystem to streamline user experiences and enhance security, while also preparing for future innovation and expansion into direct-to-consumer business lines.

Verisk Analytics, a data analytics provider with numerous subsidiaries, faced challenges due to its complex IT infrastructure, which was expensive to maintain and difficult to update. The organization aimed to create a more convenient user experience and improve security for both employees and customers. The rapid growth driven by acquisitions resulted in a highly complex IT environment, making it difficult to maintain individual branding and access shared services. Verisk needed a solution to unify its technology and improve the customer experience, as well as to manage access across its complex ecosystem and support its cloud-first vision.

Juniper, a large aged care organization in Australia, faced challenges with managing complex identity and access systems due to its diverse technology solutions implemented over the years. The organization had a high turnover rate of about 20%, which made onboarding and offboarding employees a time-intensive and manual process. Security was also a concern due to weak password complexity in disparate identity systems. Juniper aimed to streamline its IT operations to focus on improving the quality of care for its clients and residents. The organization sought to consolidate its identity systems and provide a single sign-on platform for all applications, along with multi-factor authentication for secure remote access.

Sephora faced challenges with its human resources management systems, which were previously siloed and made it difficult to centralize HR information. The company needed a streamlined solution to validate team member identity and automate operational processes. Additionally, Sephora had to address the lack of standardized HR processes due to different local regulations in each country. This required a flexible solution that could develop customized processes to meet local legal requirements and quickly adapt to changes.

Imerys, a large mineral company with operations in 40 countries and over 220 sites, faced a fragmented IT infrastructure due to its growth through mergers and acquisitions. The company needed to unify its IT systems to provide consistent access to key applications for its 13,000 employees, regardless of their location or role. The challenge was to implement a secure, cloud-based infrastructure that would facilitate the adoption of new applications and improve lifecycle management, while also ensuring robust security measures to protect against fraudulent access.

NTT DATA faced significant challenges in managing identity and authentication across its global operations. With 300,000 employees in 90 countries, the company struggled with name conflicts and complex onboarding, role changes, and offboarding processes. The existing technology solutions were inadequate, causing user experience issues and delays in communication with downstream applications. The disjointed authentication process required users to open tickets or call the service desk, leading to long wait times for issue resolution. Additionally, with 60% of staff working off-site, the need for a more effective, automated risk control system became apparent.

Live Nation Entertainment faced the challenge of managing a large, global workforce with diverse needs for accessing applications and tools. The company had a cumbersome system of multiple portals that were not user-friendly, especially for employees working remotely or on mobile devices. This complexity hindered productivity and made it difficult to deploy new applications efficiently. Additionally, Live Nation was transitioning to a 100% cloud-based infrastructure, which required a robust identity management solution that could integrate seamlessly with a wide range of applications and work on any device. The company needed a solution that would simplify access, enhance security, and support a mobile workforce, while also facilitating quick and efficient onboarding of new employees.

Kiwi.com faced significant challenges as it grew from a start-up to a large corporation. The company's IT infrastructure, initially designed for a smaller scale, became inadequate for managing over 3,200 active international users. The lack of a single point of truth for identity management led to provisioning and productivity challenges, limited visibility into company systems, and weakened security. The existing infrastructure required extra overhead to manage, and the manual processes for provisioning and deprovisioning users were time-consuming and posed security risks. Without an automated workflow, employees experienced delays in accessing necessary tools, affecting productivity. The company needed a consolidated identity infrastructure to effectively manage user access and provisioning.

Kensho Technologies, a subsidiary of S&P Global, faced challenges in maintaining its identity infrastructure as it scaled its AI and machine learning solutions. The company had adopted new identity management systems on an ad-hoc basis, leading to a disjointed environment with troubleshooting, maintenance, and monitoring challenges. As Kensho's products scaled within S&P Global and with its clients, the need to address identity maintenance challenges became critical. Kensho considered building a new system in-house, but this would have required significant resources, diverting attention from business goals. The company needed a solution that would ease the workload for its employees while ensuring top-tier and secure customer experiences.

Larimer County, Colorado faced challenges with a disparate IT infrastructure that heavily relied on Active Directory Federation Services (AD FS), which was not sufficient for supporting the county’s cloud-based applications. This resulted in a hefty IT workload and frequent reboot services, making it difficult to serve residents efficiently and securely. The county needed a solution that could secure apps and servers across a hybrid environment, enable automated employee provisioning, and streamline employee access to all tools and services through a single digital front door using one username and password.

In 2017, Merz embarked on a digital transformation strategy to improve customer experience and secure medical data. The company faced challenges due to its services being spread across multiple platforms, resulting from acquisitions in different countries. This led to a lack of centralization, creating a burden on the IT team to manage customer identities across various platforms. Customers experienced different interactions with Merz, and the IT team had to ensure data security while working towards a Zero Trust model. The need for a harmonized and optimized IT service was evident to streamline operations and enhance security.

Wyndham Hotels & Resorts faced challenges with its on-premise Identity solution, which was fragmented and inefficient. The company needed a secure, seamless access solution for its systems to enhance user experiences for both employees and customers. The existing system had multiple applications with different logins, making it difficult to manage and track user access. With an increasingly remote workforce, Wyndham required a cloud-based approach to simplify access and bolster security.

The State of Illinois faced challenges with an aging IT infrastructure, characterized by siloed operations within each sub-agency, leading to inefficiencies and a lack of standards. This resulted in a legacy technology stack with thousands of applications, making it difficult for employees and residents to access tools and services. Additionally, the state faced an aggressive threat landscape, with an increasing number of public ransomware instances and sophisticated threat actors targeting government entities. The pandemic further increased demands on government agencies, requiring quick and creative responses to meet these challenges.

Arçelik faced challenges in managing a vast B2B and B2E user base, along with 106,000 B2C customer accounts. The company relied on multiple solutions for user authentication, which became cumbersome as they adopted more cloud applications. The lack of a centralized directory led to manual management of user accounts, and new features like social logins were difficult to implement across different applications. Arçelik needed a solution that could simplify user management, improve customer experience, and support their digitalization strategy.

City University of Hong Kong (CityU) faced a significant challenge with its legacy systems, which involved disparate logins and identities across various systems for students, staff, and alumni. Each user had to manage multiple logins for different purposes, leading to a fragmented user experience. The university's fast-growing and wide-ranging academic setting often resulted in technology solutions being added in a piecemeal fashion to solve specific problems in different departments. Over time, these disparate systems led to poor integration and little flexibility across the institution. Joe Lee, Assistant IT Manager (IAM) at CityU, recognized the need to unify the governance of user identity systems to improve user and IT management. The challenge was to find a way to unify all these separate applications and services under a Single Sign-On platform, which would simplify and improve the overall experience for all users.

Trade Me faced challenges in managing identity and access for its employees as it transitioned to a cloud-first security approach. The legacy on-premise user directory was inadequate for supporting cloud applications, leading to difficulties in providing seamless access to enterprise data and apps. With the COVID-19 pandemic, the need for a robust identity service became more pressing as employees began working remotely. The company required a solution that could unify identity management for both cloud and on-premise applications, ensuring secure and efficient access for its workforce.

Soul Machines, an AI startup, faced the challenge of expanding its team from a 60-person outfit of mainly R&D engineers to a global network of business strategists, digital artists, marketers, salespeople, and scientists. This expansion required a secure and efficient identity management solution to protect its intellectual property while enabling seamless global collaboration. The company needed to migrate from its on-premise environment to a cloud architecture to support its fast-growing team and ensure secure onboarding and sharing of critical assets. Additionally, Soul Machines sought a holistic workforce identity solution that empowered people through secure inspiration exchange, rather than just ticking security and compliance boxes.

AIA Group faced a significant challenge in transitioning from a 100% on-premise infrastructure to a hybrid and multi-cloud architecture. The primary concern was ensuring frictionless cloud workflows and data-sharing while maintaining 'bank-level security' for over 20,000 employees across Asia. The existing legacy identity management system was cumbersome and lacked multi-factor authentication, which was critical for the sensitive data handled in the global insurance industry. The need for a robust identity and access management solution became apparent as AIA sought to secure its cloud transformation and enable seamless navigation among disparate environments.

Avery Dennison faced challenges in managing a complex IT landscape due to multiple acquisitions, which introduced new systems, apps, and user accounts. The company aimed to consolidate its IT stack, streamline cloud-based user sign-on and authentication processes, and enhance security. The influx of new apps and solutions brought inconsistent and hard-to-remember usernames and passwords, prompting Avery Dennison to explore ways to simplify the authentication process for employees and customers. The company needed a solution that could integrate with existing systems and provide a seamless user experience while maintaining high security standards.

Kingsborough Community College, part of the City University of New York (CUNY) system, is recognized as one of the top community colleges in the United States. The college serves a diverse student body of approximately 14,000 students in Brooklyn. As the college embarked on its cloud journey, it faced the challenge of securing access to cloud solutions for students, faculty, and staff while maintaining a primarily on-premises IT infrastructure. The college needed to develop a multi-layered cybersecurity strategy to protect against increasingly sophisticated cyber threats. The existing infrastructure was perimeter-based, and the college sought to enhance its security measures by integrating single sign-on (SSO) and identity and access management (IAM) solutions. The college also needed to streamline burdensome student processes and ensure secure access to virtual desktops, especially in response to the increased demand for remote learning during the pandemic.

The grocery delivery market in Europe is highly competitive, with time to market being critical. Flink was being held back by slow-moving systems, as all of its on- and off-boarding was carried out manually, which was extremely time-consuming given the short-term nature of its frontline workforce. The company’s rapid growth meant a swift increase in employee numbers and multiple new applications and tools being brought into the business requiring integration and provisioning. To meet this increase in demand and the resulting expansion of employee infrastructure, identity and lifecycle management became top priorities.

Kiva, a nonprofit organization, faced challenges in scaling its operations while maintaining security and compliance. As it grew, Kiva needed to manage a diverse array of personas with unique technical needs, including lending partners, corporate philanthropy users, and individual lenders. The organization required a secure and efficient identity management system to support its expanding operations and ensure seamless access for its employees and partners. Additionally, Kiva needed to address the growing problem of credential stuffing attacks and reduce the maintenance burden of its custom-built identity system.

Juni, a financial management platform for ecommerce businesses, faced challenges in managing employee identities and access permissions as the company grew. The manual processes were time-consuming and inefficient, especially as Juni was preparing to obtain industry certifications like PCI DSS. The company needed a centralized solution to streamline its Identity and Access Management (IAM) processes to support its rapid growth and maintain security standards.

Navan, a company that disrupted the travel and expense (T&E) space with its technology-forward platform, faced increasing identity-based attacks as it grew. The company collects sensitive data such as payment information and personal identifying information (PII), which made its in-house customer identity and access management (IAM) solution inadequate. As Navan expanded, the need for a robust identity management system became clear to protect against evolving threats and meet various certifications and compliance requirements. The company needed a centralized IAM solution to ensure a frictionless employee experience and maintain customer trust by keeping their information secure.

Intermex faced significant challenges due to its rapid growth and the resulting complexity in its IT infrastructure. The company had to manage a patchwork of platforms, homegrown applications, and acquired technologies, which led to inefficiencies and user frustration. The primary issue was the lack of a unified Identity strategy, with multiple Identity management tools and duplicative identities causing friction for end users. The IT team struggled with tool fatigue and the need to justify changes to the existing systems. The hiring of a new CISO, Daniel Hereford, presented an opportunity to address these challenges by consolidating the Identity management tools and streamlining the processes.

bunq, a rapidly growing digital bank, faced challenges in managing identity and access management due to its expanding user base and employee count. The manual identity and access management solutions were struggling to keep up with the growth, leading to inefficiencies and potential security risks. The company needed a scalable system that could handle access and authentication for its applications while ensuring compliance with security standards. The existing process of manually creating users in the LDAP system was time-consuming and prone to errors, taking about two hours per request. Additionally, the lack of an overarching MFA setup meant that enforcing MFA had to be done on a per-app basis, which was cumbersome and inconsistent.

Front faced challenges in improving IT efficiency and employee experience as they grew. The existing Identity and Access Management (IAM) solution required a patchwork of manual processes and homegrown scripts, which were inefficient and prone to errors. The onboarding process was disjointed, taking 30 to 60 minutes, and provisioning was a manual, multi-step process reliant on outdated Python scripts. The company needed a robust and flexible identity strategy to prepare for projected growth and enhance the entire identity lifecycle.

In the competitive video streaming industry, Bitmovin faced challenges with its manual onboarding and access management processes. As the company expanded its workforce globally, the need for efficient identity and access management became crucial. The manual processes were time-consuming, taking up to a week to onboard new employees, and the cumbersome access management led to frequent password resets and inefficiencies. Bitmovin needed a solution to streamline these processes, reduce the workload on its DevOps teams, and enable them to focus on innovation rather than IT issues.

Springer Nature, a leading global publisher of research and science literature, faced significant cybersecurity challenges due to its large, international workforce and the ongoing digitalization of the scientific publishing industry. With over 11,000 employees spread across 200 locations and multiple time zones, the company needed to protect its assets in a hybrid cloud environment. The existing security infrastructure, which included Active Directory and a home-grown Identity Governance and Administration solution, was insufficient for a comprehensive Multi-Factor Authentication (MFA) implementation. The company identified ransomware and identity theft as key risks, necessitating a more robust access management system to safeguard its valuable assets and ensure secure access for its employees.

Information security in the modern age presents a significant challenge for companies like Takeda, which must balance the need for fast, easy access to data with the growing threats to data confidentiality, integrity, and availability. As the Chief Digital Trust Officer, Mike Towers is tasked with building trust by tightening controls over sensitive company data while streamlining digital experiences for patients, caregivers, and partners globally. The acquisition of Shire Pharmaceuticals added complexity to Takeda's operations, necessitating a centralized identity platform to support a modern, Zero Trust security strategy. The existing identity and access management (IAM) system was cumbersome, requiring significant administrative effort, prompting the need for a more efficient solution.

Takeda Pharmaceutical Company faced the challenge of securing digital privacy for patients and caregivers while protecting critical data supporting life-saving research. The company operated on a traditional network access model with server rooms and on-site networks protected by firewalls, accessible only through complex VPN tunneling protocols. The Covid-19 pandemic increased the pressure on healthcare organizations like Takeda to simplify digital experiences while facing targeted data security threats. The company needed to transition from a traditional network model to a Zero Trust security model to address these challenges.

Achievement First faced challenges with staff having to manage multiple passwords for various applications, leading to frustration and wasted time. The organization needed a modern identity solution to improve security and facilitate a move to the cloud. Additionally, the COVID-19 pandemic required a rapid transition to virtual learning, necessitating a secure and efficient remote work environment.

Moonfare, a rapidly growing alternative asset investment platform, faced the challenge of maintaining security and compliance while iterating and publishing software with the agility of a startup. As a financial organization, Moonfare needed to ensure the security of its clients and data, which is crucial in a highly-regulated industry. The company required a technology partner that could provide robust identity and access management solutions to protect users' financial data and support its operations. Moonfare's VP of Engineering and Technology, Umut Koseali, emphasized the importance of performance, security, and resilience as the pillars of their engineering culture. To navigate the heavily regulated financial market, Moonfare needed full visibility and effective tools to manage access to its applications, ensuring that only authorized users could access sensitive information.