A large energy company was already using the Ping Identity platform for authentication, multi-factor authentication (MFA), and single sign-on (SSO) for employees and customers. The company recently acquired another business of similar size, which created the need to enable cross-organisation access to resources in the shortest possible time.
Both organisations had multiple user stores and different types of users and access management systems that had evolved over time. Migrating user profiles between organisations while preserving credentials and avoiding major changes for end users presented a significant challenge.
At the same time, employees from both organisations needed to access resources across organisational boundaries to continue performing business activities efficiently. The solution had to ensure minimal disruption for users while enabling a rapid integration between the two organisations.
Trevonix proposed a federation-based approach to enable seamless access to cross-organisation resources while minimising the impact on end users.
Both organisations already had authentication and federation services in place for their respective users and resources. The solution created a bi-directional trust between the organisations. With Just-in-Time provisioning, users could securely access resources across both organisations without requiring full migration of identities.
Authorisation was handled through groups and roles to ensure that users only accessed appropriate resources.
PingFederate’s federation hub capability, combined with authentication policies, was leveraged to build the solution. This approach enabled a secure and user-friendly architecture while requiring minimal infrastructure changes.
PingFederate was integrated with Microsoft ADFS and Azure AD using open standards. This allowed users to authenticate using their existing credentials and authentication mechanisms within their own organisation while accessing resources in the other organisation.
PingFederate’s authentication policies and MFA capabilities were also utilised to enhance the organisation’s overall security posture.
The energy company successfully enabled the merger in a very short timeframe while ensuring minimal disruption to users.
The project was delivered faster than expected and at a lower cost than initially estimated. The federation-based solution allowed users to continue using their existing credentials and authentication mechanisms while accessing resources across both organisations.
This significantly improved productivity by ensuring that the right users could access the right resources in the appropriate context without delays or operational friction.
.avif)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
