Case Study: Secure SSO
Solution for Ford

Scenario

FORD, the American automobile manufacturer, wanted to simplify the login process for its employees. FORD has multiple merchandise stores for different regions. So, the employees had to create different credentials for every store. Creating new credentials not only took up a lot of time but also consumed a lot of storage to save the credentials for various stores as well. Using miniOrange Single Sign-On (SSO) integration, the FORD employees could use just one set of credentials to sign in to their different merchandise stores, saving the organization, both time and storage.

About Ford

Ford Motor is an automobile company that designs, manufactures, markets, and services a full line of Ford trucks, utility vehicles, cars as well as Lincoln luxury vehicles. They have 16% of the market share in the automobile industry. They are the second-largest automobile brand in the world.

Challenges

Employees use the same username and passwords to log in to different merchandise stores in the same organization. If any attacker gets their hands on a less secure application, they can easily access any other store of the company. FORD needed a robust sign-up and authentication process for employees, dealers, and resellers and assigned different tags, resources, and permissions accordingly.

miniOrange Solution

miniOrange provided SSO to Ford merchandise stores using the credentials from the centralized server (AD) of the Ford organization. Depending upon the type of user (employees, dealers, or resellers), tags are assigned and access is granted to the different resources and permissions. Different discount schemes based on the assigned tags are provided to dealers/suppliers and employees.

1. Customer sign-up/sign-in options:

If the customer is an existing employee or dealer/supplier in the Ford organization then they can sign in by choosing the Ford employee login button. The solution is designed for both employees of the Ford organization as well as for dealers and suppliers associated with Ford. On choosing the appropriate option, the user will be redirected to their respective login pages then they can sign in using their username and password. If the identity of the employee/dealer is available in the active directory then access to the store will be granted to them.

Let us have a look at the workflow:

• When an existing employee visits the store and signs in, the miniOrange-provided Shopify SSO application will redirect the employee to FORD’s IDP login page.
• After that, a token request is made for authorization and is sent to the identity provider. In this case, the identity provider is ADFS.
• An authentication request is generated for the employee to verify his/her identity in the active directory. if the employee credentials exist, a trusted token is issued from the active directory federation service (ADFS) which is sent in response to the token request made by the miniOrange Shopify SSO application.
• Finally, miniOrange then sends the SSO response to the service provider, and the employee is granted access to the store.

Result

Ease Of Access: Easily integrate your existing Identity Provider or Data Source and provide an SSO solution without having to build a new system/framework.

Easy to integrate: For the end users, it reduces the responsibility of managing multiple sets of usernames and passwords.

Manage Users on the Existing System: With auto sync administrators can manage their users in their existing system without having to move users or maintain them in multiple applications.

Cost-effective: No hassle of building or managing a new system for Single Sign On. With a user-reverification system make sure only the relevant and active users are using the applications at all times thus reducing the overall cost.

About Us

miniOrange can provide Single Sign-On SSO solutions for Automobile companies looking for merchandise stores or dealer merchandise stores similar to that of Ford Motors. With miniOrange SSO Solution employees can use the same credentials in their organizations to access the merchandise store based on Shopify and any other website or application in your business architecture.

For Shopify SSO integration, miniOrange also provides Adaptive SSO security features, an added layer of fraud detection that provides risk-based, Multi Factor Authentication (MFA,2FA) for shopify stores seeking to protect against frauds across various digital channels. Only authenticated users can access your store. Also, restrict the number of concurrent sessions a user can have with the adaptive authentication method. For more information, or any queries you may have, contact us at shopifysupport@xecurify.com and we will get in touch with you in no time.