Boliden's Implementation of YubiKeys for Cybersecurity

This case study details Boliden's approach to enhancing cybersecurity through the implementation of YubiKeys for identity and access management. Boliden, a leading metal mining company in Europe, recognized the need for stronger security measures in light of evolving cyber threats and the increasing reliance on cloud services. The document outlines the transition from traditional username and password systems to a passwordless environment, emphasizing the adoption of FIDO2/WebAuthn authentication. The case study highlights the benefits of using YubiKeys, including improved user experience, increased security, and the ability to use a single device for multiple applications. It also discusses the deployment strategy, which involves rolling out YubiKeys to IT employees first, followed by broader access for end users. The insights provided by Mathias Ignberg, Service Manager for Identity & Access Management and Cloud at Boliden, underscore the importance of securing identities in a digitized environment and offer practical advice for organizations considering similar initiatives.