Scalability to support growth
In all, TrustBuilder authenticates users for close to 300 applications. “This ranges from just consulting pay slips to requesting vacation or even evaluating applicants.” TrustBuilder Identity Hub is used by some 4,000 SD Worx employees (who log in in the same way as external customers do) and over a million users at SD Worx customers. “In the coming years, we will migrate more of our international customers to the same platform.” Of course, they don’t all authenticate at the same moment, but there are definite peaks in traffic, explains Serge Van Kampen, Product Owner at SD Worx: “Every month there is such a peak when the HR department calculates the wages, followed by customers’ employees consulting their pay slips. And there is a huge yearly peak when calculations for taxes are made and all employees want to view their tax statement.”
Unlocking legacy applications
SD Worx regularly evaluates the IAM market, but TrustBuilder Identity Hub remains the preferred IAM solution, for many reasons. “Its flexibility is a major bonus for us,” said Adam. “TrustBuilder Identity Hub acts as an identity proxy for us, translating an identity from any protocol to any other protocol. Not only standard protocols, but proprietary protocols too. That is rare in other tools, which are sometimes SAML-only, and allow no editing. We can authenticate all our applications, even the legacy ones.” SD Worx appreciates the fact that exotic protocols can be configured by their own team, while often used or standard protocols are easy to implement thanks to the Graphical User Interface (GUI). “Whenever we ask TrustBuilder ‘can TrustBuilder ID Hub support this?’ – we have never gotten no for an answer. That is most impressive.”
TrustBuilder Identity Hub is completely transparent to users. “TrustBuilder allows us to build branding pages, so the entire system has an SD Worx look and feel. For the user, authentication is part of our portal.”
Improving Employee experience through MFA
TrustBuilder does not only work in the backend, SD Worx also uses TrustBuilder’s MFA solution to drive traffic to its mobile app, Myworkandme. “Digital will be the main channel to deliver HR interactions in the future,” says Michael Custers, CMO at SD Worx. By bundling a host of HR applications in one place, SD Worx makes life easier for both specialized HR staff and employees.
Over 5 million people use SD Worx’s HR applications. Either on a daily basis (HR professionals at the SD Worx customers) or less regularly, for instance customer employees who want to consult pay slips, request leave, approve expenses, … The information stored in HR applications is highly confidential and personal, so access is protected using Multi-factor authentication. Traditionally, SD Worx used username and password combinations complemented by hardware token devices, one-time passwords sent by SMS (SMS OTP) and mobile authenticators such as Google or Microsoft Authenticator. “We wanted to get rid of the username-password combination,” says Gert Beeckmans, Chief Risk & Security Officer at SD Worx Group. “Improving the overall employee experience was our priority. Keying in extra codes to authenticate on top of having to manage your passwords is a considerable burden and creates friction. What we were looking for was a solution that was even simpler than a user/password combination. Something that is so easy to use that users wished they had this system for every app they need to authenticate for. For us, as an organization, there is a second benefit: sending SMS OTP is expensive if you have high volumes of users using numerous online services.”
After scanning the market for a solution with a good customer experience that eliminates any usability hurdles for their customers, SD Worx chose TrustBuilder Mobile Authenticator. It is a strong authentication solution for mobile devices combining the world’s safest authentication method with the best user login experience.
TrustBuilder Mobile Authenticator caters to the mobile user who wants to get rid of passwords and adds strong authentication for mobile as well as for web-based applications. Once users have onboarded to an application, they can access that application by requesting a push notification to their smartphone. Just a fingerprint or a PIN is enough to access the application. If TrustBuilder Mobile Authenticator is integrated into a mobile app, even the push notification is not necessary.
