How Infisign Unified Multiple iDPS with Universal SSO for an International Conglomerate

About the Company

The client is a $25 billion multi-national federation of companies, with a leadership position in utility vehicles, farm equipment, and information technology. With a presence in over 100 countries and a workforce of 260,000+, they are a global leader in enabling industrial and digital transformation.

How Does Infisign’s UniFed Add Value to the Conglomerate?

The client uses Infisign’s UniFed. This is a centralized SSO and Access Gateway to unify identity governance for employees, dealers, suppliers, and even customers in the case of SaaS tools. These are some other ways Infisign UniFed helped.

Challenges Faced by the Conglomerate:

• Fractured Identity Landscape: Operating with distinct IdPs (Azure AD for corporate, AWS Cognito for dealers, and Ping Identity for logistics partners) created a disjointed access environment.
  
• Lack of Centralized Audit Trails: With audit logs scattered across multiple IdPs, the CISO lacked a single pane of glass for monitoring threats and ensuring compliance with global regulations.
  
• High Friction in Dealer Onboarding: Manual provisioning for thousands of external dealers and suppliers slowed down operations and increased administrative overhead.
  
• Inconsistent Security Policies: Enforcing uniform security measures like Multi-Factor Authentication (MFA) was impossible across disparate identity directories, leaving security blind spots.
  

Solutions Using Infisign UniFed:

• Unified Access Without Migration: Infisign UniFed acted as a central gateway, syncing with existing IdPs (Azure, Cognito, Ping) to provide a unified directory without requiring complex user migrations.
  
• Automated User Provisioning: Leveraging Attribute-Based Access Control (ABAC), the system automated role assignments based on attributes like email domains (e.g., ‘@dealer-network.com’), reducing manual admin work.
  
• Centralized Governance and Compliance: The solution aggregated audit trails from all sources into a single view, enabling the conglomerate to track every login and permission change for audit readiness.
  
• Universal SSO Implementation: Users now authenticate once via their home IdP to access all downstream applications, eliminating password fatigue and improving the user experience.

Other Benefits of Infisign’s UniFed:

• Adaptive MFA Enforcement: Centralized control allowed the client to mandate MFA across all users, regardless of their originating identity provider, significantly hardening security.
  
• Operational Agility: Rapid onboarding of new dealer networks and partners without setting up accounts in multiple isolated applications.‍
• Zero-Trust Extension: Secure network gateways extended zero-trust principles to legacy on-premise applications that previously lacked modern authentication support.