DB Schenker Innovates by Consolidating Workforce & Customer Identity Management

The Objective

DB Schenker is a global logistics leader and partner to large organizations who rely on them for on-time delivery and stable, secure services. Competing against better-known competitors, DB Schenker is committed to differentiating themselves by providing land transport, worldwide air, and ocean freight solutions that challenge the status quo.

DB Schenker’s culture of innovation extends throughout their organization, including identity management. After identifying the need for a more secure and modern authentication service, they saw a bigger opportunity to undertake a digital transformation initiative and provide better, more streamlined access to resources and information for both their workforce users and customers. 

The DB Schenker team, led by their head of identity management, James Naughton, sought to extend their existing identity and access management (IAM) infrastructure to secure employee access and take advantage of the cloud. Schenker needed support for modern web-based authentication protocols like SAML and OpenID Connect and multi-factor authentication (MFA). Additionally, their new solution needed to support additional web-based authentication and authorization protocols, including SCIM and RADIUS.

The Challenge

Seeking to maintain a “Schenkerized” solution that maintained continuity in look and feel, James and the team defined a rather unique requirement: they wanted to centralize on a single identity management service for all users, encompassing employees, contractors, partners, and customers. This required a flexible and customizable solution that would support unique configurations of the user interface and flow for each type of user.

The DB Schenker team also needed to overcome challenges posed by the coexistence of a central authentication service alongside an Azure AD solution for employee Microsoft access. They wanted to eventually provide MFA to every employee without negatively impacting their experience or the usability of either service. Rounding out their new solution requirements was the need for stability, as well as deployability to their Kubernetes cluster to enable scalability based on demand.

The Solution

James and the team asked iC Consult, their IAM consultant and systems integrator, to conduct a proof of concept. They ultimately selected Ping Identity to provide the authentication and authorization capabilities needed to deliver a consolidated and centralized identity management service. With the help of iC Consult’s developers, the DB Schenker team started the roll-out of their new Ping solution alongside their existing authentication service. Then they started to migrate integrated services to Ping.

The first stage of implementation included delivering the platform, including simple authentication and a minimum viable product for customer MFA. This first iteration included a Schenkerized user interface for authentication and full integration into DB Schenker’s existing identity management infrastructure. They also delivered a complete suite of verification options for all users, including the PingID mobile and desktop apps, and mobile SDK, as well as SMS.

The DB Schenker team next extended the solution by adding their first risk-based authentication policies based on the type of user and the application they’re attempting to access. This allowed them to streamline access by minimizing friction for low-risk access requests, while also paving the way for future passwordless authentication.