Customer Reference: Nehlsen AG

About Nehlsen AG

Nehlsen AG is a leading full-service waste management company with 3,000 employees across 40 subsidiaries at around 70 locations in Europe and Africa. Nehlsen offers services in recycling, waste disposal, industrial cleaning, and logistics.

Project Objectives

The goal of this project was to implement a central identity solution that works across all systems. This solution was designed to secure logins on Windows devices and IT systems through multi-factor authentication and meet the compliance requirements of ISO/IEC 27001 as well as the IT Security Act 2.0.

Project Implementation

The project was carried out over a period of approximately 22 months. The kick-off took place in July 2022, the evaluation began in November 2022, and the rollout was completed in April 2024. The project team consisted of six people, including project management, admins, and field staff.

Implemented Solutions:

• Setup of a redundant identity system in the data center based on the OpenText Advanced Authentication Framework.
• Procurement and distribution of FIDO2 tokens from Feitian for approximately 1,000 administrative employees to secure Windows login in addition to the AD password.
• Securing external Citrix and VPN access via RADIUS to the identity system with HOTP and TOTP.
• Use of FIDO2 tokens for authentication with FollowMe printing solutions.

Results and Feedback

Since the implementation of the solution, there have been no known security incidents related to authentication on the mentioned systems. The IT department praises the flexibility and variety of supported authentication methods and protocols. Users particularly appreciate the added value of the FIDO2 tokens, for example, for FollowMe printers. The top management also emphasizes the increased security of end devices.

Collaboration with MTRIX

The collaboration with MTRIX was rated as highly positive. MTRIX supported Nehlsen AG by:

• Requirements analysis: Identifying the specific security needs and developing a customized concept.
• Concept development and system selection: Consulting and choosing the best technologies and systems to meet the project objectives.
• Technical implementation: Setting up a redundant identity system, integrating FIDO2 tokens, and securing Citrix and VPN access.
• Consulting and support: Ongoing assistance throughout the entire project, including pre-configured FIDO2 tokens and prompt resolution of questions and issues.
• Further support: Assistance with integrating additional infrastructure topics such as Azure.