Exec Summation
OkCupid simplistic their multi-membership label and supply administration and you may enhanced cover if you find yourself protecting date and money by using AWS. The web dating internet site and you may app began migrating from the for the-properties solutions to AWS, and manage a central area from availableness for the various AWS accounts, they made use of AWS SSO near to AWS Spouse Okta’s Common Index, deploying another intent behind AWS SSO in 2 days. The solution automates user account production and you will arrangement, decreasing the chance of human error and growing shelter. Because migration, this new lean functions party can also be attract it is time toward improving the consumer experience for OkCupid’s many pages to make meaningful relationships.
Development a solution to Make clear Multiple-account Management
OkCupid, one of the largest free online dating sites and you may applications, prioritizes protecting the non-public study of their millions of profiles to make important relationships. For the 2016, the firm helped safer the backend by centralizing term and access management (IAM) having Okta Inc, a primary term and you can cover team and you can Auction web sites Websites Functions (AWS) Partner. Inside the middle-2020, OkCupid began migrating from the for the-premises system so you can AWS, in which they developed an approach to subsequent clear up multiple-account administration: using AWS Single Sign-Towards the (AWS SSO) together with Okta’s Common Index.
AWS SSO centrally manages usage of several AWS membership and you can company applications. That with AWS SSO near to Okta, end users can access almost all their assigned AWS levels and you may apps in one place, simplifying supply administration having end users and administrators. Today OkCupid can be scale up its AWS footprint and you can make the most of various other properties instead of an increase in management performs. Using this solution, OkCupid maintains high security, preserves time and money, and you can handles staff member accounts and you can permissions with ease.
“AWS SSO try an effective equipment to get the limitation matter beneficial for every single employee to make sure that we could continue the class small.”
Maintaining one Access point having Multiple AWS Accounts
OkCupid works international and should comply with several study conformity regulations for instance the European Union’s Standard Data Protection Regulation. Nevertheless company surpasses conformity to safeguard member data. “To interact successfully into software, pages need certainly to tell you their really individual selves, particularly sex identity and you will political values,” teaches you Alexander Dumitriu, Head Guidance Officer in the OkCupid. “I simply take the objective to safeguard our users’ guidance really seriously.”
Just before OkCupid first started using Okta inside later 2016, they confronted demands trying centralize IAM because of its on-properties environment. Team before must log on individually to every environment, definition they had to monitor several passwords. Administrators had to recite options inside for each and every account, a period of time-drinking techniques. “When you are chasing off multiple towns and cities to include otherwise get rid of an effective affiliate, you are not merely throwing away big date and also improving the chances that possible miss something,” says Dumitriu. “That’s a safety concern.” Okta composed one to lay in which OkCupid you are going to demand rules, carry out pages, and you can availability permissions across multiple term silos. “We love the user knowledge of Okta, like Okta Verify’s force-depending a few-basis authentication,” states Dumitriu. “It’s safer than Sms and better than simply finding out almost every other authenticator application.” By using AWS SSO and you will Okta, OkCupid could probably retain the high level away from usability and capability of repair it has got worked hard to get to.
Whenever OkCupid chose to gain benefit from the measure and you can speed you can easily on the cloud, the ability to include AWS SSO with Okta played a button part in its decision to migrate so you can AWS. OkCupid wanted to make use of the full range out of AWS services, but who would bring about an intricate give out of AWS membership you to definitely, in the event that reached . The https://datingmentor.org/paltalk-review/ fresh business agility away from AWS SSO and you can Okta set one to state. “AWS enables us having a central account where we manage the pages without the limitation commit inside the and you will arrange for each membership one at a time,” says Lou Benlahmr, elder structure engineer during the OkCupid. “It decreases management some time and gives us significantly more visibility and you can an effective even more granular means to fix perform usage of additional levels.”