#KnowYourContractor

You verify customers and partners. Not the people with the keys.

Contractors often hold the same access as employees, with almost no checks. Identity Profiling asks who is behind the account before that access is trusted.

A contractor with a badge walking into a server room
Not verified Identity created. Person unchecked.

Similar access to regular employees. Limited screening, or none.

Three kinds of people. Only two are screened.

Customers are identified before onboarding. Partners pass due diligence before a signature. Contractors are granted access and left largely unseen.

An advisor reviewing an identity document with a customer
Verified

Customers

Identified, screened, and risk-profiled before onboarding.

Two business partners shaking hands over signed agreements
Verified

Business partners

Due diligence, sanctions, and PEP checks before signing.

A contractor entering a data center with an access badge
Not verified

Contractors

Similar access to employees. Almost no checks, or only limited ones.

One Identity Manager checks the identity. Who is behind it?

Today, One Identity Manager inspects roles and attributes before access is granted. The person attached to that identity can still be unverified.

01

Real person

Someone is about to receive access to your systems.

02

Identity created

The account exists. The person behind it is unverified.

03

Roles provisioned

Entitlements are assigned from the IGA catalog.

04

Target systems

Access is live. The person was never screened.

One Identity Manager checks the roles and attributes of a given identity before granting access rights. It does not yet ask who that identity belongs to.

One risk profile. Nothing stored in the IGA.

One Identity Manager sends identity data to Rabbit over REST. Rabbit orchestrates the screening against official registers and media, then returns one consolidated profile. An API plugin carries the exchange. No screening data is saved in One Identity Manager.

Rabbit Solutions

PEP and sanction screeningRegisters
Criminal screeningRegisters
Adverse media screeningMedia

A person still decides.

The responsible person reviews whether the returned information is relevant, then takes the corresponding action. Screening informs the decision. It does not replace it.

API plugin.

The check is a build on One Identity Manager. Query and reply stay on the REST path. The IGA store is not a second copy of the registers.

Three ways to know your contractors.

Check many contractors at once.

A batch check runs the same screening across a set of contractors, instead of opening one identity at a time.

The check lives inside One Identity Manager.

From Data Explorer, an identity opens a Rabbit Check. The result is a single status: clear, or listed for review, with the match type and source list beside it.

Rabbit Check form opened beside Identities in One Identity Manager
Screening data is collected on the identity, then the check is started from inside One Identity Manager.

Your contractors have the same access you do.

Identity Profiling is IDVKM’s integration of Rabbit Solutions with One Identity Manager: client risk profiling and periodic monitoring, without leaving a second copy of the data in the IGA.