ENERGY SECTOR: REPSOL

CUSTOMER SUCCESS STORY

+

THE CHALLENGEIn line with its strategy of leadership in the energy sector and increasing

its international footprint, Repsol needed a secure access solution for its

corporate cloud application portfolio. This includes applications related

to innovation, as well as professional and corporate social networks. This

solution also had to increase ease of use for thousands of employees around

the world.

Repsol’s goal was to offer all users–both in Spain and in the field–easy and

secure access to corporate applications in the cloud using their corporate

credentials, so they no longer had to remember different passwords for each

platform. The company wanted a tool that ensured the level of security required

by a company like Repsol, with a large global workforce and presence, without

sacrificing ease of use.

Repsol’s IT department had tried other solutions, but none of them were

able to meet all their needs. The main deficiencies identified were complex

architectures, errors and lack of support for federation standards. In addition,

having to remember different passwords for external platforms that are only

accessed occasionally (sometimes after months of absence) required new

credentials to be generate. This wasted the user’s time and the support

team’s effort.

This is why, Repsol decided to start looking for a federation tool in 2013. This

involved analyzing a number of options that met the requirements of the

Kantara Initiative, one of the main drivers in the adoption of federation tools.

REPSOL: A CUSTOMER SUCCESS STORY

2CUSTOMER STORY

REQUIREMENTS• Implement a federation solution for corporate cloud platforms.

• Ensure easy deployment and integration.

• Ensure the security of all corporate information.

SOLUTIONThe solution is PingFederate and the company has acquired licenses to

meet its federation needs.

BENEFITS• Increases the security of employees’ corporate information, both in Spain

and in the field.

• Provides secure, standardized and easy access to corporate cloud

applications using corporate credentials, without the need to remember

or maintain new credentials for each platform. PingFederate is based on

open standards such as SAML, which offer the customer more freedom

than a proprietary solution.

• Receives positive feedback from employees due to easier access to

applications.

3

REPSOL: A CUSTOMER SUCCESS STORY

CUSTOMER STORY

The IT department chose Ping Identity’s PingFederate®, a full-featured federation

server that provides functionalities including web single sign-on and API security

for customers, partners and employees. Among the immediate goals were:

� Implementing a tool that didn’t require employees to memorize different

passwords.

� Ensuring better usability with single sign-on.

� Improving security through centralized management of credential and access

policies for various services.

One of the main reasons that Repsol chose PingFederate is that it offers a niche,

task-oriented solution with a simple architecture and more integration across a

greater number of platforms. But it also offers a specific service for the cloud and

easier deployment than competitor solutions.

Implementing the tool was a fast process. Deployment began in July and

installation was completed in September. In October, Repsol was able to start

integrating the various corporate cloud applications, eliminating the need to

distribute credentials to third-party systems and enabling all users to use their

corporate credentials to access the company’s services in the cloud. Ping Identity

helped simplify the installation and integrate it with Repsol’s existing standard

authentication methods, as well as those methods used to access more sensitive

information. Thanks to this integration, when employees are connected to the

corporate network and sign on to their device using their username and password,

they can automatically access the cloud service of their choice by opening the

browser and directly typing the corresponding URL.

As Ignacio de Urioste, Project Manager for Security Engineering in the department

of cybersecurity and technical risk management at Repsol explains, “Since the

integration we have had no incidents, and user feedback has been very positive.

Not having to remember and maintain multiple passwords and being able to

access the applications using personal corporate credentials has improved

access times, leading to greater efficiency for users. From now on, any entity

service contracted in the cloud for Repsol will have to be integrated with

PingFederate.”

THE SOLUTIONProject complexity centered mainly on three aspects: accessibility, usability and

security:

1. Replace all the various platform credentials with Repsol credentials, without

giving these to providers.

2. Offer ease of use and single sign-on functionality.

3. Ensure access security by centralizing security policies.

Repsol has acquired PingFederate user licenses in order to meet their federation

needs.

THE RESULTSThe greatest benefit of acquiring PingFederate licenses was the balance between

ease of use and security, which was fundamental in enabling the cloud to provide

value to the company. Ignacio de Urioste states, “We are very interested in

integrating more applications in the tool and in trying other Ping Identity services

in the future. From now on, one of the requirements for new cloud applications

we implement at Repsol will be that they integrate with our federation platform:

PingFederate.”

These types of solutions and deployments are especially necessary for large

organizations that need to adapt some of their applications or services to the

cloud, where security can’t be compromised by ease of use and vice versa.

ABOUT REPSOLAs an integrated global energy company with wide-ranging experience in the

sector, Repsol carries out upstream and downstream activities worldwide.

Repsol believes that it can leverage innovation to create a new energy model.

The company maintains a presence in areas of high energy potential, such as

Brazil, Russia and the US. In line with its steady, consolidated growth strategy,

Repsol has developed new and attractive business areas within the company.

Repsol has 24,000 employees of 80 nationalities working in 40 countries.

A SUCCESS STORY

“Since the integration we have had no

incidents, and user feedback has been

very positive. Not having to remember and

maintain multiple passwords and being able

to access the applications using personal

corporate credentials has improved access

times, leading to greater efficiency for

users. From now on, any entity service

contracted in the cloud for Repsol will

have to be integrated with PingFederate.”

-Ignacio de Urioste, Project Manager, Security Engineering in the department of cybersecurity

and technical risk management at Repsol

CUSTOMER STORY 4

Ping Identity is the leader in Identity Defined Security for the borderless enterprise, allowing employees, customers and partners access to the applications they need. Protecting over one billion identities worldwide, the company ensures the right people access the right things, securely and seamlessly. More than half of the Fortune 100, including Boeing, Cisco, Disney, GE, Kraft Foods, TIAA-CREF and Walgreens, trust Ping Identity to solve modern enterprise security challenges created by their use of cloud, mobile, APIs and IoT. Visit pingidentity.com.

Copyright ©2016 Ping Identity Corporation. All rights reserved. Ping Identity, PingFederate, PingOne, PingAccess, PingID, their respective product marks, the Ping Identity trademark logo, and IDENTIFY are trademarks, or servicemarks of Ping Identity Corporation. All other product and service names mentioned are the trademarks of their respective companies. #3078 | 05/17 | v00c