IGA/Omada project completed – now in operations

Below is a summary of what the project has delivered and what happens next.

What has the project delivered?

The project has implemented Omada, a new system that automates and secures the management of digital identities and access rights at SLU. In practice, this means:

• Smoother onboarding – new employees automatically receive the correct access based on their role and employment
• More secure account management – when someone leaves or changes role, access rights are updated automatically
• Improved overview – IT Security and Service Desk now have better tools to see who has access to what (with additional functionality to come)
• Reduced manual work – many processes that previously required manual steps are now automated.

How did the project go?

The project has been characterized by strong collaboration. A reference group with representatives from across the organization has provided valuable input throughout the project. Communication between SLU and the vendor has worked well, with fast response times and a solution-oriented approach.

Service Desk and IT Security have gained new tools that simplify their work – fewer manual steps during onboarding and improved capabilities to ensure SLU’s information security.

Challenges along the way

As with most large IT projects, there have been challenges. The go-lives for both the student flow and the employee/affiliate system required three deployment rounds each before sufficient stability was achieved. This, together with an extensive stabilization period, meant that some planned components could not be fully completed within the project timeframe.

Directory administrators – those who work very actively with the system – experienced bugs and service disruptions during the journey. However, feedback toward the end of the project has been positive as stability has improved, even though several stabilization activities continue within operations.

What is the Identity and Access Management operational object?

The project now transitions into operations under the newly established operational object Identity and Access Management (IAM). This provides a unified approach to managing all SLU systems and services that control who has access to what.

The operational object includes:

• Omada Identity (IGA) – the new system for identity management, roles, and access processes
• Active Directory (AD) – directory service for user accounts and secure authentication
• Entra ID (Azure AD) – cloud-based identity management for Microsoft 365 and cloud services
• Multi-Factor Authentication (MFA) – secure two-factor authentication for account protection
• ID Portal – self-service portal for password resets and account management.

A dedicated operational organization now assumes responsibility for day-to-day operations, further development, and support of all these components, which together ensure that the right person has access to the right information at the right time.

What happens next?

Focus areas for operations:

• Complete components initiated during the project, including access roles and request flows
• Continue stabilizing and improving Omada based on user feedback
• Coordinate and further develop the entire IAM domain – from identity creation to access control
• Build and strengthen SLU’s internal competence in identity and access management

What does this mean for you as an employee?

For most employees, daily work will continue as usual. The noticeable changes are:

• Easier onboarding for new colleagues – automated processes provide faster access to the right systems
• Improved security – automatic access management reduces the risk of retained access when it is no longer needed
• Expanded self-service functionality – easier handling of account and access-related tasks
• Unified management – all identity and access management components are now coordinated under one operational structure

Do you have questions about your account or access rights? As usual, please contact support at support@slu.se.

Looking ahead

The IGA/Omada project has laid the foundation for long-term development of SLU’s security and efficiency within identity and access management. With an established operational organization covering the entire IAM area, the conditions are now in place to continue developing and improving system support going forward.

If you have questions about the project or the operational organization, please contact Johan Karlsson, Operational Manager for Identity and Access Management.
For support-related matters, please submit a case to support@slu.se.