IMS access via PING (for Third Parties)

Any (Third Party) user can access IMS applications that are hosted inside the Shell VPN environment, with public internet, using their non-Shell GI-D devices (including iPhone, iPad, Android, PC and Mac).

Pre Requisites

First a Shell account and a PING ID must be setup, then IMS access rights and a PING enabled website URL must be provided.

Shell account

Setup a third party user account within the Shell Global Address List. You can accomplish this by using this SNOW request to get it created in GAL.

PING ID

Shell Identity Management Authentication & Authorization Service (SIMAAS) uses a product called Ping Identity to allow authorized persons to access Shell technology from outside the Shell network. This way also IMS can be accessed via PingID Multi-Factor Authentication (MFA) from outside the Shell network.

To setup PingID Authentication:

1. Register for PingID - see the Shell guidelines: 
   • Guide to PingID Setup on SIMAAS (see also attached), or
   • Setting UP PingID Mobile Device Application.
2. Install the PingID application and pair your mobile device / desktop - for guidance see: 
   • Guide to PingID Setup on SIMAAS (see also attached), or
   • PingID Registration for iOS Devices Video.

IMS access rights

Make sure that your account is provided with access rights inside IMS. If not, connect with your site Super User to get it arranged.

Website URL

Finally request your site Super User to provide you a correct PING enabled website URL, similar to the below. 

Example:  

• ims-YOURSITENAME.europe.shell.com/ping   
• ims-YOURSITENAME.americas.shell.com/ping  
• ims-YOURSITENAME.asia-pac.shell.com/ping  

Using PING ID to access IMS

Once your PING ID is active and you have the correct IMS URL, you can follow the steps below to access IMS:

• Open your browser and enter the applicable IMS URL, suffixed with “/ping” at the end!

• You will be redirected to the Shell Authentication System. Select PingID MFA and enter the email and password that you used for signing up to PingID.

• Go to your mobile device and use your access method (fingerprint, swipe, or OTP) to verify your identity. For more information see: PingID MFA and iOS Authentication Video.
• A message will inform you that authentication is in progress. Then, a green checkmark screen will be displayed.

• Your browser will be redirected to IMS, and you will be logged in.

More Shell related guidance are available here: Shell Support Documents \ IMS for Third Party users PingID Multifactor Authentication.