Centralised Authentication & Authorisation for Foxconn

‍About the Client

Foxconn Hungary is part of the global Foxconn Group, one of the world’s leading electronics manufacturing companies. As part of its industrial digitalisation strategy, Foxconn Hungary deploys XR solutions to support manufacturing and operational workflows. In this context, fast, reliable and secure user access is critical for frontline operators and engineering staff working with XR-enabled systems.

The Problem

At the outset of the project, Foxconn’s identity infrastructure was split between a local Active Directory and Azure Active Directory. This resulted in several operational and security challenges:

• User identities existed in parallel across two separate systems
• HoloLens applications frequently required additional sign-ins
• Roles and permissions had to be managed separately for each application
• Duplicated accounts and fragmented permissions increased security risks

In a high-throughput manufacturing environment, these issues led to unnecessary administrative effort, slower user workflows, and limited visibility over access governance. Foxconn required a frictionless, centralised and secure identity and access management solution suitable for enterprise XR deployment.

The Solution

Holoindustry implemented a centralised XR Authentication and Authorisation module, providing a single, consistent access layer for all XR and web-based applications.

Azure Active Directory–based Authentication

The solution is built around Azure Active Directory as the single source of truth for user identities. Users authenticate using their corporate Azure AD credentials via the OpenID Connect protocol. Upon successful authentication, the system issues a JSON Web Token (JWT), which must be included in every subsequent web or XR request. Requests without a valid token are automatically rejected.

On desktop devices, authentication is handled through the operating system’s default browser. On HoloLens devices, passwordless sign-in is supported when the user is already logged in with their corporate account. This enables a true single sign-on experience for XR applications and removes the need for repeated authentication during daily operations.

Centralised Role-based Authorisation

A dedicated authorisation gateway was introduced in front of all backend services. This gateway intercepts every incoming client request, verifies the user’s assigned roles, and forwards the request only if the required permissions are met.

Access management follows a group-based model: roles are assigned to groups rather than individual users, users can belong to multiple groups, and each group may carry multiple predefined roles. This approach ensures consistent access control, simplifies administration, and supports scalable growth as XR usage expands across the organisation.

Administration is handled through a REST API and a secure web interface, accessible only to authenticated users. All system communication is enforced over SSL/TLS encryption, ensuring compliance with enterprise security requirements.

The Results

The implemented solution delivered clear operational benefits:

• Users only need to sign in once on their HoloLens devices
• Identity management is fully centralised through Azure Active Directory
• Security is strengthened through gateway-based access control
• Administrative workload is reduced via group-based role management
• A consistent user experience is maintained across XR and web applications

The solution established a secure and scalable foundation for Foxconn Hungary’s enterprise XR environment.

Looking to implement a secure and scalable authentication and authorisation framework for your own industrial XR environment? Get in touch with Holoindustry to explore how we can support your digital transformation with enterprise-ready XR solutions.