|work|: Onelogin Airbus
“That’s good. That’s something. But if they’ve compromised the identity provider at the directory level, they can issue themselves new tokens. Dad, listen to me very carefully. Do you have physical access to a network switch or a firewall?”
Lena went silent for three seconds. He counted. Then: “Don’t touch anything. Don’t log out. Don’t change your password. If the attacker has identity persistence, any credential reset will just lock you out while they keep their token. Where’s your MFA coming from?” onelogin airbus
It had started as a quiet revolution. Six months ago, the IT director—a young, perpetually caffeinated woman named Safiya from the Toulouse headquarters—had rolled out the new identity and access management platform. “OneLogin,” she’d said at the all-hands, her voice bouncing off the hangar walls, “will unify every system, every login, every piece of data access across Airbus Commercial, Defence, and Helicopters. One identity. One key to the kingdom.” “That’s good
She was quiet for a long moment. Then, in a voice that reminded him of her mother—steady, fierce, unbreakable—she said: Dad, listen to me very carefully
“It’s too seamless,” he’d joked to his colleague Meena over lunch in the cantina. “I’m starting to trust it.”
“No,” he said, his voice steady despite the tremor in his hands. “Something’s happening at the plant. Our SSO provider—OneLogin. I think it’s been compromised. I think someone’s inside every system we have.”
He called Safiya. No answer. He called the Toulouse SOC. The line rang once, then went to a generic voicemail—a voicemail he’d never heard before, in English with a slight accent: “The number you have dialed is not in service. Please check the number and try again.”