Establishing an Identity & Access Management Program

Challenge

A large insurance company needed to ensure that its internal staff, as well as its customers, had access to their private and sometimes sensitive data as well as protecting access to the services on the backend. Despite having a legacy IAM solution in place, the client found that it still needed help with:

• Modernizing their login and access patterns to mitigate security risks and prevent the storage of sensitive user data by insecure front-end apps and browsers
• Centralizing their authentication systems for better management and security, allowing consistent access to user auth by many different development teams (both internal and external)
• Establishing programmatic API access to user identity management while maintaining security and architecture best-practices