Why do oil and gas companies multiply authentication systems?

Actors in the oil and gas industry face fragmentation in access systems. According to HID Global, 59% of companies in the sector use three or more authentication systems to manage both physical access (secure zones, equipment) and logical access (workstations, digital interfaces). Each system is often managed by separate teams, with independent lifecycles and audit trails. This complexity leads to delays or failures during access revocations: 35% of companies have faced difficulties in this area over the past two years.

A unified identity is only useful if it allows integrating and authenticating field teams without interrupting operations.

How does a unified identity solve these issues?

The goal of a converged credential approach, as advocated by HID Global in collaboration with the FIDO Alliance, is to provide each employee, contractor, or operator with a single individually managed credential. This unique credential would enable access to both physical resources (doors, equipment) and logical resources (computer systems, HMI interfaces). Unlike existing badges, which cannot automatically become FIDO credentials, this solution relies on technologies such as IDmelon, a FIDO2-compatible platform designed for industrial environments.

IDmelon notably enables bulk user enrollment, simplifying deployment for thousands of employees or contractors. Authentication on shared workstations could be as simple as a touch with a converged credential, reducing friction for field teams.

What technical and operational challenges remain to be addressed?

Deploying a unified identity within the oil and gas industry is not without obstacles. OT (Operational Technology) systems must be preserved, and no changes should be made without prior validation, emphasizes HID Global. Several factors influence the design of deployment: the technology of the cards used, the available interfaces, the readers, the operating systems of the terminals, the identity providers, and the application protocols. Furthermore, operational environments require phishing-resistant authentication, adapted to the constraints of field sites.

The solution must also ensure seamless integration without disrupting ongoing operations. As HID notes, « converging credentials is only useful if a frontline workforce can be onboarded and authenticated without disrupting operations ». This implies rapid enrollment processes and compatibility with existing infrastructures.

What this changes here: opportunities for businesses and administrations in West Africa

The authentication challenges faced by the oil and gas industry also resonate with the issues confronting businesses and administrations in West Africa, where managing physical and logical access remains often fragmented. A unified approach, such as the one proposed by HID and the FIDO Alliance could reduce the maintenance costs of identification systems, limit cyberattack risks linked to the proliferation of credentials, and improve access traceability.

For critical sectors such as energy, infrastructure, or healthcare, where operational security is paramount, a converged solution could also streamline compliance with local and international regulations. However, its adoption would hinge on organizations' ability to integrate these technologies without disrupting their operations, while ensuring the chosen solutions (such as IDmelon or other FIDO2 platforms) meet the specific needs of local environments, often constrained by less modern infrastructure or limited connectivity.