Reducing Costs by Identifying Orphaned Accounts
Orphaned accounts are active IT user accounts that are often associated with former contractors or temporary employees. These accounts are a source of inflated IT license spend and increased risk for the organization.
This company faces a familiar problem for many organizations. While there may be HR procedures for terminating an employee, the other departments are often disjointed and are not a part of the formal termination procedure. This means any applications that are not centrally managed begin to accumulate a wealth of former employees. When coupled with contractors and temp employees not being managed through the HR system, the number of accounts that stay active post departure gets out of hand quickly.
Due to the subscription model many SaaS apps use, these accounts incur unnecessary license costs the moment employees leave the company.
The Digital Marketing Company has faced rapid growth, resulting in the expansion of departments and new employees. In turn, new applications and tools are onboarded across the organization.
The company has found hundreds of active application accounts for terminated employees. Due to SaaS subscription models, the company has unknowingly been paying for these users even though the accounts are unused.
Clarity Security's Solution
Clarity Security provides instantaneous proof of value through our Identity Unification™ process. Once the APIs and Webhooks are established into the enterprise applications and HR system, we automatically begin to match the accounts using proprietary mapping algorithms. After the algorithms complete (less than an hour), a report is prepared for administrators that outlines every instance where:
- Unique usernames appear
- An account has not been logged into in 30 days
- A username appears in a handful of applications but none of the directory services
As administrators review the findings, they can act immediately by deprovisioning the accounts directly from our portal.
The Digital Marketing Company's IT team speculated that there were 200 active user accounts associated with employees no longer with the company. After completing Identity Unification™, we identified 350 active user accounts in AD, all of which were no longer employed by the company. After deprovisioning these accounts, we were able to free up 10% of their IT license spend.
Download the Full Case Study
Download our full case study to gain a deeper understanding of how Clarity Security can take your identity governance to the next level.