Enterprise Case Study · IAM Transformation

Identity Transformation Program

A greenfield SailPoint Identity Security Cloud (ISC) implementation delivered for a large Australian retail organisation, disentangling its identity platform from a former parent company following a corporate demerger.

70–75%Faster provisioning
30,000+Identities unified
60Connected applications
Client Context

Client Context & Demerger Mandate

Establishing autonomous, cloud-native identity security for one of Australia’s largest retail and hospitality operators.

The Client

A Large-Scale Retail & Hospitality Operator

The organisation is one of Australia’s leading retail drinks and hospitality operators, running an extensive national network following a corporate separation from its former parent company in 2021.

Dynamic workforce of 30,000+ employees & contractors.
Over 1,700 retail stores and 350+ hospitality venues across multiple well-known consumer brands.
Operates specialised fine wine and supply chain divisions under additional brand lines.
Demands high operational availability paired with strict cybersecurity controls.
The Challenge

The Greenfield Imperative

Post-Demerger Separation

Corporate separation required disentangling the organisation’s identity footprint from its former parent company’s shared, on-premises SailPoint IdentityIQ (IIQ) platform. The organisation needed complete operational autonomy to govern workforce access across independent IT, HR and payroll systems.

Fresh Build vs. Replication

Rather than executing a like-for-like migration, the organisation elected to build a fresh, cloud-native foundation using SailPoint Identity Security Cloud (ISC). Building fresh avoided inheriting legacy technical debt, custom code overheads and historical process bottlenecks.

Complexity

Key Transformation Drivers

📁

System Consolidation

Consolidating two legacy identity platforms and three separate HR systems into a single source of truth feeding SailPoint.

🏢

Multi-Brand Complexity

Managing distinct brand access rules, unique email naming conventions, and frequent cross-brand internal secondments.

👥

Seasonal Scaling

Absorbing rapid festive hiring surges — onboarding roughly 2,000 seasonal workers in weeks with instant birthright access.

The Solution

The Solution Architecture

Architected and deployed by implementation partner Caliber IDX to deliver automated governance at scale.

Platform

Core SailPoint ISC Capabilities

🔄

Lifecycle Automation (JML)

Full automation of Joiner, Mover and Leaver workflows integrated with SAP SuccessFactors for rapid birthright access and offboarding.

🔗

ServiceNow Integration

A consolidated catalog layer enabling self-service access requests, paired with automated IT ticket generation for identity data validation errors.

📋

Dynamic Roles & UAR

40 OOTB birthright roles and localised Dynamic Roles, supported by automated User Access Reviews across 60 connected applications.

Integration

Integration & Movement

OOTB Connector Strategy

Caliber IDX deployed SailPoint generic connectors to integrate target systems — including finance platforms, timekeeping tools and messaging apps — without custom code.

Automated Mover Coordination

Integrated SailPoint forms allow internal movers to coordinate email address and UPN transitions smoothly, preserving active meeting schedules during transfers.

Approach

Delivery Approach & Partnership

Tranche-Based Delivery

Adopted a phased rollout prioritising “crown jewel” systems first to mitigate risk. Embedded test automation and regression suites ensured continuous platform stability and performance under peak load.

Embedded Squad Model

Caliber IDX specialists operated as an embedded team alongside the client’s IT, HR, Separation and Security stakeholders. Joint working groups, regular showcases and design sessions fostered deep business ownership and rapid adoption.

Results

Quantifiable Business Impact

70–75%

Faster Provisioning

In-store onboarding lead time reduced from >1 day to under 2.5 hours via SuccessFactors synchronisation.

30–40%

Fewer Support Tickets

Heavy JML automation and automated error ticket creation eliminated dozens of manual support tasks.

30,000+

Identities Unified

Single source of truth established across two identity platforms and three HR systems with zero disruption.

In Their Words

Executive Perspectives

“We’ve built a secure and scalable identity-first core on SailPoint Identity Security Cloud — and we’re executing against a clear roadmap. It’s disciplined, fit-for-purpose, and built to last.”

— Senior Manager, Identity & Access Management, Large Australian Retail Organisation

“Delivering an identity transformation of this scale and complexity has been a true joint achievement. Seeing the tangible business outcomes now realised for our client is incredibly rewarding for the Caliber IDX team… What I am most proud of is the way our teams worked side by side — solving challenges together.”

— Peter Bures, Director & Head of Delivery, Caliber IDX
Outcome

Built to Last

A resilient identity foundation powering future operational growth and cybersecurity maturity.

Large Australian Retail Organisation · Caliber IDX Partnership

Planning your own identity transformation?

Our team is here to assist — get in touch and let’s talk through your IAM roadmap.

Contact Us