Energy Ecosystem Overview David Miller Chief Security Officer

Covisint Summary “In a league of their own with no direct competitors” – IDC Research World’s Largest, Global B2B Ecosystem Automotive Energy Financial Services Healthcare Travel Global Business: Detroit (MI) Frankfurt (Germany) Shanghai (China) Analyst Recognition: “Covisint has been a visionary in leveraging the cloud” – Gartner $800 million investment 18,000,000+ Identities

Issues in Energy Industry VisibilityTrustComplianc e TechnologyCostChange User Experience

Issues in Energy Industry VisibilityTrustComplianc e TechnologyCostChange User Experience

Issues in Energy Industry VisibilityTrustComplianc e TechnologyCostChange User Experience

VisibilityTrustComplianc e TechnologyCostChange User Experience Identity Lifecycle Management Federation Management Audit and Attestation Brokering and Protocol Trans SSO, Portals and Dashboards SaaS - Always up to Date SaaS - Lower TCO Energy Industry Solution

Shell Oil Joint Ventures Contractors Business Partners Employees Executive Leadership Suppliers Shell Oil Ecosystem Challenges:  Diverse, loosely coupled workforce with special identity and security requirements.  Need to provide provisioning services for ~ 750,000 identities of contractors and joint ventures  Goal = Institute highly secure provisioning throughout extended workforce Results:  Quick provisioning and de-provisioning  Improved security and auditing  Better security visibility across contractors and joint ventures

How Covisint helped Shell? Phase I: Implement Basic Identity Lifecycle Management Single point of administration for JV’s, partners, suppliers, and other extended enterprise identities Invite and register organizations Delegate authority and administration Invite, register & credential end users via self-service Orchestrated application provisioning Attestation features Strong audit & reporting capabilities

Phase II: Enhanced Identity Lifecycle Management Rich user profiles for employees of JV’s, partners, suppliers, and other extended workforce constituents Role definitions and assignments (leveraging delegated model) Service package definitions and assignments (leveraging roles and rules) Request & Approval workflows Federated provisioning: On first federation (SAML) Web services (SPML) Administrator managed (orchestrated, manual) Identity Synchronization (IDSync)

Phase III: Federated Single Sign-on Outbound Federation: your users accessing externally hosted applications connected to Covisint Inbound Federation: external users accessing your applications connected to Covisint Federated Sign On: User credentialed by your organization or a third party federate inbound or outbound via Covisint Direct Authentication: Users that are credentialed by Covisint sign in directly to Covisint, and subsequently federate to your applications or externally hosted applications connected to Covisint

Benefits Shell has seen Benefits of Cloud Model Lower Total Cost of Ownership Expenses are operational - rather than capital Time to market Speed to value Enhanced security posture Focus on your core competencies Covisint's experience = reduced project risk

Thank you.