About the organization
Maire Tecnimont is a multinational group with a highly technological DNA. As an International leader in the field of plant engineering (mainly in the hydrocarbon sectors of petrochemical engineering and refining, and fertilizers), Maire Tecnimont manages large turnkey engineering, procurement, and construction (EPC) projects. It operates in over 45 countries on four continents.
The challenge: Become Passwordless to Improve Security and User Experience
Maire Tecnimont desired to become a passwordless company in order to improve both security and user experience. A simplified UX that matched currently deployed infrastructure, including physical access, application security attestation, and strong administration capacity across its IT map was mandatory. A desired deployment scenario would allow a user authentication method for Microsoft Windows and Active Directory session access, web apps, access to printers, as well as authentication to NFC-enabled devices.
Maire Tecnimont looked into several technologies to suit their requirement for a multi-purpose solution that retained compatibility with their existing modern hardware (accessibility through hardware ports like USB A, USB C and diverse devices like Macs, PCs, Android-based, etc.). Highly desirable was a single tool to associate user identity.
The YubiKey was initially chosen for its capacity to address a large variety of use cases; Windows login via the smartcard functionalities, Office 365 using native FIDO2, and other web applications, as well as physical access to buildings and lockers. Two technologies are available for lockers: NFC tags and FIDO2. FIDO2 would allow locker access management in all Maire Tecnimont offices around the world.
A trial deployment started in April 2019 for a first group of 500 users. After a successful initial roll-out, Maire Tecnimont decided to expand the deployment to another 2,500 users to be equipped through 2019.