CASE STUDY - NatWest Group
When NatWest Group’s Identity and Access Management (IAM) team couldn’t keep pace with demand for application onboarding, we set up an automated self-service solution. It transformed IAM into a critical enabler for digital innovation at the bank.
Cloud Platform Engineering
NatWest Group’s IAM team provides authentication and authorisation capabilities for colleagues building the bank’s digital applications. After the introduction of a modern platform for IAM, the team faced difficulties with the process for application onboarding. As well as involving multiple handoffs and dependencies, temporary project structures and silos of information, each onboarding required manual deployment and configuration testing.
Lead times for onboarding applications exceeded 90 days, and the backlog was increasing at a rate IAM could not keep pace with. It was also impossible for the team to prioritise continuous improvements, such as automating configuration deployments.
Recognising that DevOps engineering could break this self-perpetuating cycle, the IAM team partnered with DevOpsGroup to develop a new onboarding process.
“We knew there had to be a way to overcome the challenges we were facing. Working with DevOpsGroup meant we got there faster. This positive introduction to DevOps engineering has empowered our IAM engineers, and will deliver long term benefits.”
We developed a self-service solution with automation at its core so that application teams could onboard themselves with minimal intervention from IAM. Testing, governance and deployment of applications was also automated. The approach involved standardised patterns and processes which were brought to life using technology such as Ansible, TeamCity and Python.
To maximise the benefits, IAM also transitioned to a product-based operating model which was better suited to the new technology and practices being developed. DevOpsGroup’s engineering squad worked with IAM specialists to implement this, while our consultants provided support upskilling the team.
By codifying the IAM onboarding patterns we unlocked faster feedback loops and change cadence for both the IAM team and its consumers. As an additional benefit, we made use of the existing platform’s API so consumers and platform management teams didn’t need to schedule downtime to deploy configurations.
The future strategy is to create more standard patterns for onboardings, and the extendibility of the solution makes this easy to achieve.
The implementation of automated self-service has repositioned IAM as an enabler of digital innovation at NatWest Group. There has been a 50% increase in deployments into production and a 50% decrease in wait times for consumers. Time spent by the IAM team onboarding each application has reduced by 70%.
IAM engineers now take advantage of pair programming and a pull request based branching model as well as automated pipelines to facilitate feedback and avoid single points of failure. With the shift to a product-based approach, the team is now increasing its capabilities to visualise and organise for the end-to-end flow of consumer value.
These improvements have had a positive impact on the IAM team’s ability to prioritise positive change. It now works proactively to enhance service offerings while keeping pace with innovation at the bank.
“The IAM team is now at the forefront of self-service adoption and delivery within NatWest Group’s enterprise engineering division. DevOpsGroup helped us achieve this by changing the team’s mindset and enabling us to make the most of new technologies.”