Kasada Strengthens Identity Governance with Automated Lifecycle Management and Group-Based Access Reviews

Challenges (Before Zluri)

Onboarding Challenges

• Onboarding relied on multiple systems (HRMS, IDP, and downstream applications).
• IT admins manually logged into separate admin accounts for each tool.
• Provisioning required multiple handoffs and waiting for systems to sync.
• Each onboarding took approximately ~2 hours of manual effort per user, often spread across days.

Offboarding Challenges

• Offboarding required manually checking what access a user had and why.
• IT had to consult managers to confirm required removals.
• High risk of missed or delayed deprovisioning, especially during role changes.
• Similar effort to onboarding, sometimes more time-consuming due to access validation.

Solution (With Zluri)

Kasada implemented Zluri as a centralized Identity Governance platform, integrating BambooHR and JumpCloud to orchestrate identity lifecycle events and access governance.

Zluri Value & Outcomes (After)

Onboarding Automation

• Zluri automated onboarding workflows triggered from HR events.
• Access provisioning is now centralized and tracked in one system.
• Managers and IT teams no longer need to manually coordinate across tools.

Impact:

• Onboarding time reduced from ~2 hours to ~15 minutes per user
• Consistent, repeatable onboarding across teams and regions
• Clear audit trail of who was provisioned, when, and why

Offboarding Automation

• Zluri provides a single view of all applications and licenses assigned to a user.
• Access removal no longer depends on manager follow-ups or tool-by-tool checks.
• Offboarding actions are standardized and consistently enforced.

Impact:

• Faster offboarding than onboarding due to centralized visibility
• Reduced risk of orphaned access and compliance gaps
• Improved security posture during employee exits and role changes

‍

Access Review Challenges

• User Access Reviews (UARs) were conducted at the individual user level.
• Reviewing access across eight core application areas took 1–2 weeks per cycle.
• Limited context around why a user had access (role vs group vs exception).
• Group memberships were difficult to audit directly in tools like JumpCloud and AWS.
• Reviews were stressful, manual, and hard to repeat consistently for audits.

‍

Group-Based Access Reviews

• Kasada adopted group-based access certifications instead of individual user reviews.
• Reviews focus on group membership, which directly maps to role-based access (e.g., AWS admin, Kubernetes access).
• Reviewers gain context such as team, manager, department, and group rationale.

Key Advantages:

• Easier to detect incorrect group assignments, even when access appears valid
• Faster identification of access inherited through the wrong group
• Enables review of complex permission models (AWS, Kubernetes) more effectively
• Helps surface abandoned or over-privileged groups over time

Impact:

• Access review preparation time reduced from 1–2 weeks to 3–4 hours for eight application groups (90%+ reduction)
• Higher review accuracy and better reviewer decision-making
• Stronger audit readiness with repeatable, policy-driven certifications

Business Impact Summary

• ~85–90% reduction in onboarding and offboarding effort per user
• 90%+ reduction in access review preparation time
• Improved consistency, visibility, and compliance documentation
• Increased confidence during audits and quarterly certifications

‍