As the company that processes nearly 60% of Brazil’s public administration data, Serpro is responsible for customer data security as well as for recommending best practices. To ensure data processing integrity and to comply with federal data security standards, the company wanted to standardize and automate data transactions. After evaluating available solutions, the company adopted Oracle Identity Manager, which, when integrated with its human resources system, improved identity management and provided more control over data access by users, such as customers (government entities) and citizens, and other groups, including public employees, taxpayers, the tax collection agency, and ministries. The solution helped Serpro improve system security for its 8,000 registered internal users. Now operations, such as employment terminations, vacations, and leaves of absence automatically restrict access based on specific user privileges in addition to eliminating manual work, thus enabling the company’s data security to be monitored and strengthened, which is vital to providing more reliable public services.
“We examined alternatives on the market, but chose Oracle Identity Manager because of the tool’s ability to adapt to our specific needs, as well as its excellent Gartner Group ranking. Furthermore, we have always counted on the support of Oracle’s professionals to work in partnership with us to achieve our goals,” said Ulysses Machado, general information security coordinator, Serpro – Serviço Federal de Processamento de Dados.
Serpro uses and controls legacy systems and distributes market applications—developed in-house or by customers—which means it is responsible for an extremely diverse platform and solution environment. Despite the complexity, Serpro was able to integrate Oracle Identity Manager with Serpro’s human resources system.
“We completed the integration between two very different system configurations—our old Cobol-based human resources solution and Oracle’s Java-based solution. In addition, with an enormous information volume and more than 480,000 internal and external users, the system could not be shut down. We therefore sought to create an architectural model that preserved and integrated both kinds of applications. Oracle Identity Manager matched this approach perfectly, and we were able to integrate the solutions to coexist seamlessly without destroying or recreating data. Furthermore, it takes only a few seconds to synchronize the Oracle solution with our data, even though the application serves a great number of systems,” said Ulysses Machado, general information security coordinator, Serpro – Serviço Federal de Processamento de Dados.
Partner –IT7 Sistemas provided us with great support during the integration process, working as a team with Serpro and Oracle, as this project required a lot of architecture and involved many codes. However, everyone’s contribution enabled us to achieve our goal,” said Ulysses Machado, general information security coordinator, Serpro – Serviço Federal de Processamento de Dados.