Case Study: Largest Insurance Company in the UK achieves automated access certifications and enterprise-wide identity visibility with SailPoint Technologies

Addressing Compliance Challenges with Identity Governance

The customer is the UK’s largest insurance company and one of the world’s biggest insurers, operating in 28 countries with 53 million customers and 46,000 employees. Faced with complex, highly regulated global operations and disparate identity systems—plus an urgent SOX-driven compliance deadline—the company needed to eliminate manual, error-prone certification processes, gain centralized visibility into user access, and prevent separation-of-duty and privileged-access risks.

The company deployed SailPoint IdentityIQ to aggregate identity data from 100 applications and 12 authoritative sources, automate access certifications, and enforce SoD policies. The solution was rolled out across five countries for an initial 8,000 users in under six months, enabling automated reviews of 200,000 entitlements, identification and revocation of more than 22,000 inappropriate entitlements (raising revocation rates from ~3–5% to 10–12%), faster audit readiness, reduced compliance costs, and a foundation that has since expanded to manage 136,000 identities across 11 countries.