A new employee joins the company. With go:Identity, his identity can either be created automatically from HR data sources or through a simple manual input process.

In go:Identity you can create different types of identities, such as internal, external, or admin. You can determine the necessary attributes and forms yourself, which also facilitates processes for non-IT personnel. go:Identity creates the identity and calculates any number of attributes such as username, email address, unique IDs and much more according to your specific rules.

go:Identity creates user accounts based on rules or definitions and assigns the exact authorizations that the new identity requires. go:Identity also sends out the initial passwords.

Of course, identities can also be created for the future. That way, employees can receive their access and assets exactly when they need them.

Changes can come in many forms. An employee might switch departments, change tasks within the company or take on a new role. go:Identity automatically responds to all such events and adjusts authorizations and access, removes and/or blocks them and corrects data.

Data changes can be synchronized between any systems that are connected to go:Identity. Changes in the HR data can thus also automatically trigger the necessary changes in target systems.

Time brings changes - go:Identity ensures secure authorizations and data at the right time.

Live views show you the current system access (accounts) and authorizations for your identities (including target / actual comparison) at any time.

With time limits that have start and end dates, authorizations can be made available exactly when they are needed.

When an employee leaves the company, go:Identity guarantees secure and consistent handling of access and authorizations.

When a leaving date is reached, you can set your own rules for access and authorizations, e.g. blocking, labeling, moving or deleting access. Further actions can be added easily.

Other periods of time such as short-term absences, parental leave or block times can also be treated in a controlled manner.

Automatic processes can proactively warn you before a limit date is reached, and the processes can also automatically take over further downstream actions such as archiving, deletion and other post-processing.

go:Identity's easy-to-navigate IT Shop allows employees to request access, authorizations or other “items” for themselves or for other definable groups of people.

In addition to the convenient search function, multi-level categories help you keep track of things even with tens of thousands of authorization roles in the shop.

The orders themselves are processed in the integrated go:Identity workflow environment.

All participants are kept up to date on the progress and results of the orders, both on a dashboard and by email.

"What if ..." ...project managers could update the members of their email distribution lists themselves? Or if access to certain fileshares could be assigned and removed by the people who are responsible? What if there were no more questions and reports on “Who has access to my fileshare?” because the responsible parties can look it up themselves at any time?

With go:Identity you can do just that, and give your managers an easy-to-use tool that can do it all.

This can shift many of the administrative activities that are now part of IT to the specialized departments. It reduces the IT effort and increases the speed for users.

For example, you could enable a local fileshare admin to easily manage the members of the corresponding AD groups via the web browser without giving him or her administrative access to the console in the AD.

Of course, all such actions are audited and thus remain traceable.

go:Identity tracks the target status of permissions in target systems: the exact permissions that the identities need to have.

But final permissions in the target system can differ, e.g.

• because the target system was manually administered,
• because other processes were involved,
• or because automatic changes were temporarily not possible due to technical interruptions.

go:Identity shows such deviations online or in the reporting and automatically corrects them if desired.

In go:Identity you can flexibly create any number of different attestation campaigns for regular recertification of

• groups of people
• departments / project groups / locations / positions
• roles and permissions
• authorization assignments
• and much more.

Includes a “clearing center” functionality for possible ambiguities, delegation, any actions after “confirm” or “reject,” smart email notification. Everything done online and documented.

No more endless lists laboriously created by IT, or email chaos at the end of the year. The responsible parties work online in go:Identity in an uncomplicated interface.

In order to adhere to and review compliance rules, it is crucial that assigned permissions and data always be traceable. go:Identity maps rules reliably through automation and answers the important questions about all assigned permissions and stored data:

• Origin of permissions

• Information from the approval processes for approved permissions.

• “Before / after” data for all data and permissions changes

• Independent storage of audits for flexible adjustment of retention periods.

Is there any information that you cannot see online in go:Identity? Hard to imagine, but of course go:Identity allows you to create all kinds of reports and data exports:

• Flexible report design using professional design software, with export options to PDF, Excel®, Word®, CSV, text formats and much more

• Regular data deliveries by email.

• Data exports for external systems.

If required, the system can optionally be expanded to include a report and information portal using the JasperReports^® Server.

In addition, go:Identity allows you to send dynamic notifications very easily and flexibly. For example, a list can automatically be sent to supervisors showing which of their employees will be leaving soon, e.g. in 14 days.