Savola Foods powers theengine of its business byadding modern authentication
via OneLogin by One Identity“With OneLogin, we can enable modern security for our legacy onpremises apps and a unified access experience for all users.”– Mohamad Kerdi, Director of IT Infrastructure and Services

SAVOLA

Challenges

Location: Middle East

• Access to applications hosting sensitive
company information wasn’t secure

Users: 4000
Website: savola.com• The suite of legacy applications
didn’t support modern authentication
functionality• IT had to manually perform commissions
and decommissions

Savola Foods, part of the Savola Group, manages
a wide range of market-leading food brands in 50countries. Brands such as Afia, Shams and Italiano
are loved by consumers and many are market
leaders in multiple countries. From humble origins
selling edible oil in its local Saudi market, Savola
Foods has grown to be a major regional player. Thecompany has maintained the traditional focus on
consumer staples, such as edible oil, sugar, pastaand ghee, but is expanding into new markets andhigher-value product categories.

Challenges
To do their jobs, employees across Savola Foods
rely on ready access to a suite of businessapplications. Since these applications containsensitive financial, HR and strategic planning
information – and can be a conduit for security
threats entering the corporate environment – the ITteam needs to ensure secure, authorized access.

Solutions• OneLogin access management provided
cost-effective Multi-Factor Authentication

Results• Enabled modern access management for
legacy apps, including Cisco VPN• Freed IT from manual provisioning anddeprovisioning• Strengthened VPN security

The team had taken advantage of built-in security
features, like single sign-on (SSO) and multifactor
authentication (MFA), to secure its modern apps.
However, its suite of legacy applications didn’t
support modern authentication functionality. As
a result, IT had to manually commission users,
monitor app access and manually decommission
users. In addition, users sometimes had accesschallenges, especially factory workers who weretrying to meet delivery deadlines. When COVID-19
hit, these issues were further complicated.
“We needed authentication that could beintegrated with our legacy suite to enable all ofour workers to do their jobs efficiently,” explains
Mohamad Kerdi, Director of IT Infrastructure andServices for Savola Foods.
“Though we have embraced a cloud-first strategy,
our business suite is decades old. The suite’s vendor
offers an access solution, but we wanted to go witha modern, state-of-the-art, robust solution and step
into the future,” continues Naeem Shah, Databaseand Smart Factory Transformation Senior Managerfor Savola Foods.

SolutionsWith a goal of incorporating its legacy businesssuite into its current Identity and Access
Management (IAM) processes, the IT team began
its search. Initially, it focused on an MFA solution for
VPN that tied back to the company’s on-premises
Active Directory (AD) environments. Afterevaluating many vendors, the team discovered
One Identity and the vendor’s OneLogin accessmanagement solution, a cloud-managed service
that serves as the central point to manage accessfor on-premises applications.
Not only did OneLogin by One Identity offer a costeffective solution, Savola Foods appreciated theinvolvement of One Identity’s technical experts.
“They were very engaged in helping us figure outthe right solution because our app integration issophisticated,” Kerdi said.
After conducting a proof of concept, Savola
Foods was confident that OneLogin was theright solution. “It provides MFA out of the box,
eliminating the need to subscribe to our suite
vendor’s separate MFA solution,” explains Shah.

2“”

OneLogin enables our strategy tostreamline access and management.
said Shah

Results

OneLogin is the mechanism that connects Savola
Foods’ suite of on-premises apps to ActiveDirectory. Through it, users remotely authenticate
via MFA using their AD credentials.

When the IT team enforces OneLogin for the firsttime, workers install OneLogin Protect, a one-time
password (OTP) mobile app. SSO is enabled
seamlessly between OneLogin and the suite ofbusiness applications, regardless of the user’slocation. That means remote users – even those in
the factories without dedicated machines and email
addresses – can access business apps to get theirwork done.
With OneLogin deployed, a single team now
manages AD, and IT has eliminated duplicate
monitoring efforts. Because OneLogin is integrated
with AD, the IT team now uses a single directory to
manage all users. At the same time, IT can monitor
access through the OneLogin portal.

About One Identity“One Identity delivers unified identity security
solutions that help customers strengthen theiroverall cybersecurity posture and protect
the people, applications and data essential
to business. Our Unified Identity Security
Platform brings together best-in-class Identity
Governance and Administration (IGA), Access
Management (AM), Privileged Access Management(PAM) and Active Directory Managementand Security (ADMS) capabilities to enableorganizations to shift from a fragmented
to a holistic approach to identity security. One
Identity is trusted and proven on a global scale –managing more than 500-million-plus identities
for more than 11,000 organizations worldwide.
For more information, visit www.oneidentity.com.

Kerdi said,

This enables us to continue down
the path of enabling a single
pane of glass for all our apps.

”

According to Shah, “Before using OneLogin, we
called upon Active Directory for all cloud-based
apps and the suite vendor’s directory for its apps.
Now we can enforce real-time, smart security
across the organization.”

Since enabling SSO and MFA for its suite of legacy
business apps, Savola Foods has enabled 600
external users to access the company’s Cisco VPN
via OneLogin. Once users are disabled from AD,they are automatically disabled from the VPN orOneLogin. “OneLogin MFA ensures an extra layer of
security for our VPN,” says Kerdi.
The current plan includes adding apps from Archer,
SAP SuccessFactors and CA Technologies, among
others. From a strategic point of view, Savola Foods
wants OneLogin to be the hub for all its SSO-basedsolutions and will gradually move all apps toOneLogin by One Identity.

© 2022 One Identity LLC ALL RIGHTS RESERVED. One Identity, and the One Identity logo are trademarks and registered trademarks of One Identity LLC in the U.S.A. and other countries. For a complete list of One Identity trademarks,
please visit our website at www.oneidentity.com/legal. All other trademarks, servicemarks, registered trademarks, andregistered servicemarks are the property of their respective owners. CaseStudy-Savola-LP-75517