How King Fahd University
secured its workforce
KFUPM, situated in Dhahran, Kingdom of Saudi Arabia, plays an active role in achieving the Government's Vision 2030 that stresses the development of a knowledge-based economy and on scientific research which are the core areas of the University.
The deployment in numbers
Leading world-class educational organisation enhances MFA in line with vision 2030
A university is only as secure as the way its people sign in. King Fahd University of Petroleum & Minerals (KFUPM) in Dhahran plays an active part in Saudi Arabia's Vision 2030, with its focus on scientific research and a knowledge-based economy, so protecting the systems behind that work matters a great deal.
The university's Projects Appraisal Committee reviewed and compared several established options before deciding on a different approach. A key concern was that many systems lean on a one-time passcode generated by the device, which the university could not rely on across its older hardware. This case study shows how MyID MFA from Intercede answered that challenge with pattern authentication, giving KFUPM strong multi-factor sign-in that stays secure even if a device is compromised, directly addressing the phishing threat the university set out to reduce and works without depending on a PIN, password or OTP.
KFUPM was tasked with looking for the right MFA in a crowded market
With so many MFA vendors on the market, KFUPM was looking for a solution that would secure its resources and protect its users against cybersecurity threats, and phishing in particular.
Wide vendor evaluation
KFUPM reviewed software solutions from Gemalto, LinQ2, Google Authenticator, WSO2 and Microsoft (cloud-based) multi-factor authentication systems.
Device security limitations
KFUPM could not depend on the mere generation of one-time passcodes for older devices, which generate codes purely from the device.
Phishing resistance was non-negotiable, given the targeted nature of attacks on research institutions.
Active Directory integration
Any solution needed to fit into the existing identity infrastructure.
KFUPM selected MyID MFA, a complete, easy-to-deploy multi-factor authentication solution
MyID MFA provided a complete and easy to deploy multi-factor authentication, password replacement, and single sign-on solution for on-premise and cloud applications.
Pattern authentication
stays secure even if the device is hacked, as the passcode is based on a dynamic code combined with human knowledge (a pattern or a PIN).
Password replacement
MFA that does not require a PIN or password at all.
Standards compliance
delivers NIST compliance.
Offline support
works 100% offline.
Pattern authentication stays secure even if the device is hacked as the passcode is based on a dynamic code combined with human knowledge (a pattern or a PIN). Other MFA systems rely on the security of the device through the generation of a One-Time Passcode, but we couldn't depend on the mere generation of OTP for older devices.
Secure sign-in that works on every device
Pattern authentication rolled out quickly across the university, gave staff strong multi-factor sign-in that holds up even on older hardware and when a device is compromised, and works offline while integrating with the university’s existing Active Directory.
Fast, well-supported rollout
Users were set up quickly with secure access to KFUPM's information systems, helped by video tutorials, webinars, downloads and a self-service portal that made installation straightforward.
Works on every device, old or new
Because pattern authentication combines a dynamic code with something the user knows, it removed KFUPM’s dependence on device-generated one-time passcodes, which the university could not rely on across its older hardware.
Improved productivity
KFUPM has already seen from the recent implementation that cyber threats have been resolved therefore creating a positive impact on user productivity.
NIST compliant
It delivers NIST compliance, works 100% offline and offers multiple tokens per user while also integrating smoothly with the Active Directory.
The platform behind the deployment
Intercede is a cybersecurity software company and the digital identity experts. For over 25 years, Intercede has helped government agencies, defence programmes, financial institutions and enterprises deploy phishing-resistant digital identities at scale.
The MyID product family, MyID CMS, MyID MFA and MyID PSM, manages millions of credentials across more than 20 countries. Vendor-neutral architecture means MyID integrates with virtually any certificate authority, hardware security module or smart card manufacturer, without organisations replacing existing infrastructure.