Alert icon Keyboard navigation enabled.
Alert icon TAB or Shift+TAB to navigate across. Down ↓ to open menu. ESC to close menu.
Alert icon Down ↓ to select section. Right → to activate. Up ↑ / Down ↓ / Tab to traverse all. ESC to exit.
BeyondTrust
Skip to content Use space or enter to skip.

What can we help you find today?

Instant Results
  • Website Results
  • Technical Documentation

Filter Options

Focus your search

Filtering by

Your recent searches:

Contact Us Chat with Sales Get Support
  • English
  • Deutsch
  • français
  • español
  • 한국어
  • português
  • Home
  • Resources
  • Blog
  • Canada’s WSIB Automates Privileged Account Management with Bomgar’s RED Identity Management current page
Link copied

Canada’s WSIB Automates Privileged Account Management with Bomgar’s RED Identity Management

May 1, 2018
Author:
Chris Stoneff
Chris Stoneff
VP Security Solutions, Development
Blog banner default
Canada’s WSIB Automates Privileged Account Management with Bomgar’s RED Identity Management
Chris Stoneff
Chris Stoneff
VP Security Solutions, Development

Who in the IT group was doing what and when? This was the question that Canada’s Workplace Safety and Insurance Board (WSIB) need to resolve to maintain strict control over access to approximately 250 Windows servers across two sites in the IT infrastructure.

Based in Toronto, the WSIB is legislated by the Ontario government and is responsible for administering the Workplace Safety Insurance Act (WSIA). WSIB provides benefits, monitors the quality of healthcare and assists in employees’ safe return to the job. 

“Most of our administrator accounts were tied to generic passwords and there was no way to identify who was using them,” said Peter Gruner, team lead, systems engineering. “Basically we were sharing the same passwords between about 10 people in our group and relying on the honor system to ensure that no one was abusing administrative privilege.”

Further complicating matters, when Gruner’s IT staff did find the time to update privileged passwords, they would do so manually – a cumbersome change process that was not guaranteed to encompass every account on the network. Whenever passwords were changed, new ones were sent in a sealed envelope to the manager of IT security. As a result, Gruner began searching for a product that could automatically change the WSIB’s privileged account passwords at regular intervals, and delegate and audit access to the passwords.

For this new project, Gruner turned to Lieberman’s RED Identity Management solution. Now a Bomgar company, RED IM operates by automatically discovering the privileged accounts located throughout the network – on server and desktop operating systems, line-of-business applications, databases, Web services, network appliances and other IT assets. It then changes each account’s password to a unique value (as frequently as desired) and deploys the password changes wherever they are used in the data center. By doing so, RED IM provides the accountability of show precisely who on the IT staff has administrative access to powerful privileged accounts, at precisely what time and for what purpose.

We no longer have the problem of anonymous access to administrator IDs, If someone is making changes GPOs, for example, and needs the administrator password, RED IM notifies us by sending out an email when the password is checked out.

Peter Gruner , team lead, systems engineering

Gruner and his staff also no long have to attempt time-consuming manual password changes – RED IM automates this entire process. Read this full case study for more details on WSIB’s use of Bomgar’s identity manager and how their security posture improved overall.

For more details, read the full case study! 

Latest Posts
  • Hooked on Identity (Part 2): Abusing OAuth Trust Boundaries in Okta
    Jun 12, 2026 Hooked on Identity (Part 2): Abusing OAuth Trust Boundaries in Okta
    Blog
    7m
  • Hooked on Identity: Abusing SAML Assertion Inline Hooks in Okta
    Jun 9, 2026 Hooked on Identity: Abusing SAML Assertion Inline Hooks in Okta
    Blog
    6m
  • Joining Project Glasswing: Securing the Privilege Backbone of the AI Era
    Jun 8, 2026 Joining Project Glasswing: Securing the Privilege Backbone of the AI Era
    Blog
    5m
  • The Most Common & Most Dangerous Types of Shadow IT
    Jun 5, 2026 The Most Common & Most Dangerous Types of Shadow IT
    Blog
    19m
  • 14 Password Management Best Practices
    May 28, 2026 14 Password Management Best Practices
    Blog
    12m
Related
  • Strengthening Agency Cyber Defenses with Privileged Access Management
    Jan 29, 2020 Strengthening Agency Cyber Defenses with Privileged Access Management
    Blog
    1m
  • Best Practices for AD Auditing and Recovery
    Jun 7, 2016 Best Practices for AD Auditing and Recovery
    Blog
    1m
Share this Article
  • Link
Stay up to Date
Get the latest news, ideas, and tactics from BeyondTrust. You may unsubscribe at any time.

Keep up with BeyondTrust

Customer Support Get Started
  • LinkedIn
  • X
  • Facebook
  • Instagram
  • Add BeyondTrust as a preferred source on Google
  • Privacy
  • Security
  • Manage Cookies
  • Do Not Sell My Data
  • WEEE Compliance

Copyright © 2003 — 2026 BeyondTrust Corporation. All rights reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust Corporation is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.

Prefers reduced motion setting detected. Animations will now be reduced as a result.