Connecting Identity.

Transforming Digital Business.

Case Study: S Group

R e t a i l e r g r o u p e m b r a c e s d i g i t a l i d e n t i t y a s

c o r e t o i t s d i g i t a l i s a t i o n s t r a t e g y

S Group is a Finnish retailer group that owns a number of supermarkets,

hypermarkets, restaurants, hotels, gas stations, financial, and insurance services

and brands. The group is the Finnish & Baltic equivalent to UK-based Tesco

or US-based Walmart in its relative breadth and reach to consumers in their

respective home countries. Its revenue exceeds €11b and it employs over 40,000

people.

S Group services are present just about everywhere in Finland, and are also

present in Russia and the Baltic countries. Uniquely, S Group is a cooperative

with two million co-op members (client owners) and in 2017 distributed over

€300m in bonus payments its client owners. S Group operates a loyalty program

for client-owners who are issued with shares and a client-owner loyalty card

called an S-Card.

Embrace digital identity across a complex group of

companies and services

S Group has a wide range of both internal and external services operating under

different brands, infrastructure and teams, which made it very difficult for

customers to see and use all of the services easily. With each S Group company

often operating several brands, each with their own online services, customers

Background

Challenge

2

were unable move easily between services and websites and S Group was

unable to effectively engage its customers with all available services.

Many S Group services also offer online product sales and promo discounts

to loyalty members and the group needed a way to easily apply discounts to

encourage offer uptake. Other S Group digital services included digital receipt

and warranty management, management of the two million client-owner loyalty

program members and annual bonus payments.

Transform the customer experience with digital identity

ǻ Connect all applications and services to a single consumer identity

ǻ Meet user experience demands with a simplified customer journey, including

personalisation of content and automatic product discounts based on profile

ǻ Embrace social identities and step-up strong (verified) identities to reduce

friction during registration and engagement

ǻ Embrace multi-factor authentication (including Mobile ID / Mobile PKI) when

the situation demands stronger identity assurance

ǻ Ensure privacy and security for identity credentials

ǻ Support for desktop, mobile and across S Group devices (such as POS)

Unlocking the power and convenience of a single digital

identity

S Group uses the Ubisecure Identity Platform to achieve a wide range of

Customer IAM functionality designed around providing customers with a single

identity for all S Group company applications and services:

ǻ Registration and login using social, business and S Group’s accepted strong

identities

ǻ Provide workflows for situational multi-factor authentication (step-up auth)

and authorisation based on profile

ǻ Provide single-sign on (SSO) across all group applications and services

ǻ Offer personalised customer journeys based on single identities

ǻ Provide customers with 24/7 self-service identity data management

Digitalisation objectives

Solution

— WAT C H A D E M O O F S O M E

O F T H E S E F E AT U R E S O N

YO U T U B E

3

The Identity Platform is used to link different websites and online stores together

and enable the use of external identities with a wide range of identity provider

support to authenticate and sign into the S Group portal, allowing a modern

bring-your-own-identity approach:

ǻ Strong verified identities - S-Bank ID, Mobile ID / Mobile PKI

ǻ Social identities – Facebook, Google, Microsoft, LinkedIn

ǻ And of course – username password

— S T E P U P A U T H E N T I C AT I O N

For example, the Identity Platform’s SSO capabilities allow a customer to sign

into S Group’s portal using username/password to switch between services

and offers, check loyalty points, review bonuses, purchase history and product

receipt/warranty details.

But at the point when the situation needs stronger identity assurance, such

as self-managing identity credentials in the registry system, customers will be

prompted to use S Group’s accepted strong IDs such as a BankID or a national

digital ID – a process known as step-up authentication. Such workflows can

be configured with high flexibility to support the specific situational identity

assurance needs across all services, sites or resources etc.

4

The benefits of the Ubisecure Identity Platform to S Group are deep:

F O R C U S T O M E R S

Happier and more loyal customers thanks to the use of a single identity:

ǻ SSO across many different services

ǻ faster registration, login, engagement and checkout

ǻ personalised content and product promotions based on profile

ǻ easy access to receipts, warranties and bonus information

ǻ self-managing identity data and functions 24/7

F O R S G R O U P

Use of the Ubisecure Identity Platform to achieve Customer IAM benefits was a

core component of S Group’s digitalisation initiatives, leading to:

ǻ improved customer engagement and retention

ǻ lower support costs

ǻ enriched customer identity data, attributes and profiles

ǻ improved security and privacy controls around identity data

Find out how Ubisecure can help you with your digitalisation and identity

initiatives.

sales@ubisecure.com

ubisecure.com/contact/

Get in touch

Benefits

5

www.ubisecure.com

sales@ubisecure.com

About Ubisecure Ubisecure provides feature rich customer identity management software and

services to help companies reduce identity data breach risk, improve operational

efficiencies, and improve user experience.

The company provides a powerful Identity Platform, deployed as IDaaS, Cloud,

or on-premise software. The platform consists of productised Customer

Identity & Access Management (CIAM) middleware and API tooling to enable

single digital identity benefits across multiple applications. Capabilities include

enabling complex authorisation and delegation workflows, single sign-on (SSO),

frictionless multi-factor authentication (MFA), user identity management, and

pre-established connections to dozens of third-party identity providers (social,

mobile, and verified).

Ubisecure’s Right to Represent is a representation governance solution offering

a fast and easy way to assert and verify an individual’s mandated rights to

electronically represent their company, including financial, signatory, or

other authority. Ubisecure’s widely used Delegated Authority solution allows

individuals and organisations to manage which users and organisations can act

on their behalf to dramatically reduce costly, time consuming and delay-prone

manual workflows.

Ubisecure is accredited by the GLEIF to issue Legal Entity Identifiers (LEI) under

its RapidLEI brand. RapidLEI is a cloud-based service that automates the issuance

and registration of these highly assured organisation identifiers.

U B I S E C U R E U K

The Granary, Hermitage Court

Hermitage Lane, Maidstone

Kent, ME16 9NT, UK

UK: +44 1273 957 613

UB I S E C U R E F I N L A N D

Vaisalantie 2

FI- Espoo, 02130

Finland

FI: +358 9 251 77250

U B I S E C U R E S W E D E N

Blekholmstorget 30 F

111 64 Stockholm

Sweden

SE: +46 70 603 34 83

U B I S E C U R E D A C H

Franz-Joseph-Str. 11

80801 Munich

Germany

DE: +49 89 20190980