{"id":7823,"date":"2022-08-30T16:05:12","date_gmt":"2022-08-30T13:05:12","guid":{"rendered":"https:\/\/www.protectimus.com\/blog\/?p=7823"},"modified":"2024-09-11T13:38:24","modified_gmt":"2024-09-11T10:38:24","slug":"customer-stories-sicim-2fa","status":"publish","type":"post","link":"https:\/\/www.protectimus.com\/blog\/customer-stories-sicim-2fa\/","title":{"rendered":"Protectimus Customer Stories: 2FA for SICIM"},"content":{"rendered":"\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/09\/sicim.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1000\" height=\"1000\" src=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/09\/sicim.png\" alt=\"SICIM 2FA customer story - logo\" class=\"wp-image-8051\" srcset=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/09\/sicim.png 1000w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/09\/sicim-300x300.png 300w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/09\/sicim-150x150.png 150w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/09\/sicim-768x768.png 768w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/09\/sicim-610x610.png 610w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/09\/sicim-160x160.png 160w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/09\/sicim-240x240.png 240w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/09\/sicim-60x60.png 60w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/09\/sicim-184x184.png 184w\" sizes=\"auto, (max-width: 1000px) 100vw, 1000px\" \/><\/a><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-null is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<p class=\"has-text-align-left\"><a href=\"https:\/\/www.sicim.eu\/en\/\" target=\"_blank\" rel=\"noopener\">SICIM<\/a> is a world leader in the engineering and construction of pipelines, pumping stations, industrial buildings and other facilities for the oil and gas sector<\/p>\n<\/div>\n<\/div>\n\n\n\n<blockquote class=\"wp-block-quote has-text-align-left is-style-default\">\n<p><em>We started using Protectimus products in 2021. At the moment, my assessment of the company&#8217;s work is 10 out of 10. An important factor in choosing this two-factor authentication provider was the possibility of customizing the 2FA system for our project. We needed to secure two systems (Roundcube + Fortigate VPN Client) with one physical 2FA token for each user. After we got in touch with the Protectimus team and explained the task, they implemented the necessary functionality for us free of charge. They also helped us to integrate and set up the two-factor system the way we wanted. There were no problems or failures with the hardware tokens or the backend part so far. Everything works well.<\/em><\/p>\n<br><cite>Cristian G, System Administrator at SICIM<\/cite><\/blockquote>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading has-text-align-center\"><strong><strong>Key tasks for implementing 2FA for SICIM<\/strong><\/strong><\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>SICIM uses the Protectimus 2-Factor Authentication (2FA) solution to secure access to corporate accounts when users log in using VPN. Also, SICIM uses two-factor authentication to protect access to the employees&#8217; corporate email boxes.<\/p>\n\n\n\n<p>It was important for SICIM to find a two-factor authentication provider who is ready to help with the 2FA integration and, if necessary, will customize the 2FA system to respond to the individual requirements of SICIM.<\/p>\n\n\n\n<p>Customization of Protectimus two-factor authentication products to the requirements of our clients is one of our profiles, so we made our best to meet SICIM&#8217;s interests and added the necessary functionality to the Protectimus Cloud 2FA Service.<\/p>\n\n\n\n<p>Let&#8217;s discuss the project for the implementation of two-factor authentication for SICIM in more detail.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:100%\">\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:33.33%\">\n<p class=\"has-text-align-left has-background has-normal-font-size\" style=\"background-color:#f4f4f4\">SICIM wanted to solve several challenges with 2FA<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:66.66%\">\n<ol class=\"wp-block-list\">\n<li>To protect access to corporate resources when users connect via VPN.<\/li>\n\n\n\n<li>To protect access to the employees&#8217; Roundcube webmail accounts with 2FA.<\/li>\n\n\n\n<li>To connect hardware two-factor authentication tokens.<\/li>\n\n\n\n<li>To set up a two-factor authentication system so that employees can use the same hardware 2FA token both to log into their email and connect to the corporate account via VPN.<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:33.33%\">\n<p class=\"has-background has-normal-font-size\" style=\"background-color:#f4f4f4\">The following Protectimus 2FA products were chosen to solve the above mentioned tasks<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:66.66%\">\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.protectimus.com\/guides\/saas-service\/\" target=\"_blank\" rel=\"noreferrer noopener\">Protectimus Cloud Two-Factor Authentication Service<\/a>;<\/li>\n\n\n\n<li><a href=\"https:\/\/www.protectimus.com\/guides\/radius-2fa\/\" target=\"_blank\" rel=\"noreferrer noopener\">Protectimus RProxy<\/a> component for integration with VPN client via RADIUS;<\/li>\n\n\n\n<li><a data-type=\"URL\" href=\"https:\/\/www.protectimus.com\/guides\/roundcube-2fa\/\" target=\"_blank\" rel=\"noreferrer noopener\">Protectimus Rouncube<\/a> component for integration with an email client;<\/li>\n\n\n\n<li>Programmable hardware OTP tokens <a href=\"https:\/\/www.protectimus.com\/flex\/\" target=\"_blank\" rel=\"noreferrer noopener\">Protectimus Flex<\/a>;<\/li>\n\n\n\n<li>An additional feature has been introduced &#8211; the ability to create user aliases. This feature made it possible to use one token for authentication on two different resources.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading has-text-align-center\"><strong><strong>Challenges and Solutions<\/strong><\/strong><\/h2>\n\n\n\n<p><\/p>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:33.33%\">\n<p class=\"has-background\" style=\"background-color:#f4f4f4\">To protect access to corporate SICIM resources when users connect via VPN (Fortigate VPN Client)<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:66.66%\">\n<p>The Protectimus RADIUS 2FA component was used to integrate the Protectimus two-factor authentication solution with the Fortigate VPN Client. It allows you to connect the Protectimus 2FA service or on-premise platform to any device supporting the RADIUS authentication protocol. Documentation on integrating Protectimus 2FA over the RADIUS protocol is available <a href=\"https:\/\/www.protectimus.com\/guides\/radius-2fa\/\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a>.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:33.33%\">\n<p class=\"has-background\" style=\"background-color:#f4f4f4\">To protect access to the SICIM employees&#8217; webmail accounts (Roundcube)<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:66.66%\">\n<p>The Protectimus Roundcube 2FA component was used to integrate the Protectimus two-factor authentication solution with the Roundcube email client. This plugin helps to set up a 2FA for Roundcube webmail client in just 15 minutes. Integration instructions are available <a href=\"https:\/\/www.protectimus.com\/guides\/roundcube-2fa\/\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a>.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:33.33%\">\n<p class=\"has-background\" style=\"background-color:#f4f4f4\">To connect hardware OTP tokens<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:66.66%\">\n<p>SICIM has chosen the most modern and reliable means of generating one-time passwords &#8211; programmable hardware TOTP tokens Protectimus Flex, which are programmed via NFC. The client can add secret keys to such tokens with the help of Android smartphone with NFC.<\/p>\n\n\n\n<p>Protectimus clients can choose from several types of OTP tokens and one-time password delivery methods. These are different models of hardware 2FA tokens (classic Protectimus Two or programmable Protectimus Flex and Protectimus Slim NFC), 2FA application on iOS or Android, delivery of OTP passwords via Telegram, Viber, Facebook Messenger, SMS or email. It is possible to activate only one authentication method or use several types of OTP tokens at the same time. The list of available 2FA authentication methods is available <a href=\"https:\/\/www.protectimus.com\/tokens\/\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a>.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:33.33%\">\n<p class=\"has-background\" style=\"background-color:#f4f4f4\">To set up a two-factor authentication system so that employees can use the same hardware 2FA token both to log into their email and connect to the corporate account via VPN<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:66.66%\">\n<p>Especially for SICIM, we added the ability to create user aliases in the Protectimus Cloud Service. So it became possible to assign one user with one 2FA token to two different resources.<\/p>\n\n\n\n<p>One of Protectimus&#8217; unique offerings is the ability to tailor our 2FA system to customer requirements. We are always ready to help with the imtegration of Protectimus 2FA into the most complex infrastructures and develop the requited additional functionality,if necessary. Contact us and tell us about your project <a href=\"https:\/\/www.protectimus.com\/contact-us\/\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a>.<\/p>\n<\/div>\n<\/div>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading has-text-align-center\"><strong><strong><strong>2FA products used<\/strong><\/strong> by SICIM<\/strong><\/h2>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-flow wp-block-group-is-layout-flow\">\n<p><\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:25%\">\n<h4 class=\"wp-block-heading has-text-align-left\">Protectimus  <br>Service<\/h4>\n\n\n\n<p><a href=\"https:\/\/www.protectimus.com\/guides\/saas-service\/\" target=\"_blank\" rel=\"noreferrer noopener\">Protectimus cloud two-factor authentication service. Using a cloud 2FA service, you do not waste time and money to deploy and secure a 2FA server in your infrastructure.<\/a><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:25%\">\n<h4 class=\"wp-block-heading has-text-align-left\">Protectimus <br>RADIUS 2FA<\/h4>\n\n\n\n<p><a href=\"https:\/\/www.protectimus.com\/radius\/\" target=\"_blank\" rel=\"noreferrer noopener\">2FA plugin for integration with any software or device supporting RADIUS protocol. The Protectimus 2FA solution assumes the role of a RADIUS server.<\/a><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:25%\">\n<h4 class=\"wp-block-heading has-text-align-left\">Protectimus Roundcube 2FA<br><\/h4>\n\n\n\n<p><a rel=\"noreferrer noopener\" href=\"https:\/\/www.protectimus.com\/ru\/roundcube\/\" target=\"_blank\">2FA plugin for integration with Roundcube webmail client. Easily configured and allows you to secure access to users&#8217; Roundcube accounts in just a few minutes.<\/a><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:25%\">\n<h4 class=\"wp-block-heading has-text-align-left\">Protectimus <br>Flex<\/h4>\n\n\n\n<p><a rel=\"noreferrer noopener\" href=\"https:\/\/www.protectimus.com\/flex\/\" target=\"_blank\">Programmable hardware TOTP tokens. Secret keys in Protectimus Flex hardware security tokens can be reprogrammed using the Protectimus TOTP Burner app for Android.<\/a><\/p>\n<\/div>\n<\/div>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading has-text-align-center\"><strong><strong><strong>Read more Protectimus customer stories<\/strong><\/strong><\/strong><\/h2>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p>&nbsp;<\/p>\n<div class=\"wp-block-image is-style-default\"><figure class=\"aligncenter size-large\"><a href=\"https:\/\/www.protectimus.com\/blog\/protectimus-customer-stories-2fa-for-ipak-yoli-bank\/\" target=\"_blank\" rel=\"noreferrer noopener\">\n<img decoding=\"async\" src=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2024\/09\/Ipak-yoli-bank-logo.png\" alt=\"Ipak Yoli Bank 2FA customer story\" class=\"wp-image-7886\" style=\"border: 3px solid #f4f4f4\"><\/a><\/figure><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p>&nbsp;<\/p>\n<div class=\"wp-block-image is-style-default\"><figure class=\"aligncenter size-large\"><a href=\"https:\/\/www.protectimus.com\/blog\/customer-stories-dxc-technology-2fa\/\" target=\"_blank\" rel=\"noreferrer noopener\">\n<img decoding=\"async\" src=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/08\/dxc-technology-logo.jpg\" alt=\"DXC Technology 2FA customer story\" class=\"wp-image-7886\" style=\"border: 3px solid #f4f4f4\"><\/a><\/figure><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p>&nbsp;<\/p>\n<div class=\"wp-block-image is-style-default\"><figure class=\"aligncenter size-large\"><a href=\"\/\/www.protectimus.com\/blog\/volet-2fa\/\" target=\"_blank\" rel=\"noreferrer noopener\">\n<img decoding=\"async\" src=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2022\/08\/volet-logo-blog.png\" alt=\"Volet 2FA customer story\" class=\"wp-image-7886\" style=\"border: 3px solid #f4f4f4\"><\/a><\/figure><\/div>\n<\/div>\n<\/div>\n<span class=\"et_bloom_bottom_trigger\"><\/span>","protected":false},"excerpt":{"rendered":"<p>SICIM is a world leader in the engineering and construction of pipelines, pumping stations, industrial buildings and other facilities for the oil and gas sector We started using Protectimus products in 2021. At the moment, my assessment of the company&#8217;s work is 10 out of 10. An important factor in choosing this two-factor authentication provider [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":8070,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[9],"tags":[1278,194,1290,1240,1292,1294,1296],"class_list":["post-7823","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-protectimus-products","tag-customer-stories-en","tag-protectimus-en","tag-protectimus-flex-en","tag-protectimus-products","tag-protectimus-roundcube-en","tag-protectimus-rproxy-en","tag-sicim-en"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/7823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/comments?post=7823"}],"version-history":[{"count":40,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/7823\/revisions"}],"predecessor-version":[{"id":8842,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/7823\/revisions\/8842"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/media\/8070"}],"wp:attachment":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/media?parent=7823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/categories?post=7823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/tags?post=7823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}