Manager Conclusion

OkCupid simplistic their multi-account term and you will supply government and you will increased shelter when you’re saving big date and cash by using AWS. The net dating internet site and you will software began migrating from the towards-premise expertise so you can AWS, and to take care of a central part away from availableness because of its some AWS membership, it used AWS SSO next to AWS Mate Okta’s Common Directory, deploying an alternative aim of AWS SSO in 2 months. The solution automates representative membership development and you can setup, decreasing the likelihood of person error and expanding defense. Due to the fact migration, the newest slim functions party can notice it is time towards improving the user experience to possess OkCupid’s scores of users while making meaningful relationships.

Developing a means to fix Express Multiple-membership Management

OkCupid, one of the largest totally free adult dating sites and you can applications, prioritizes securing the personal investigation of the millions of pages and then make significant relationships. Inside the 2016, the firm helped safer the backend by the centralizing identity and you will access management (IAM) having Okta Inc, a primary identity and you will security business and you can Auction web sites Web Attributes (AWS) Lover. From inside the mid-2020, OkCupid began moving from the into the-site system to AWS, in which it establish a solution to after that express multi-membership administration: playing with AWS Solitary Signal-Into the (AWS SSO) in addition to Okta’s Universal Index.

AWS SSO centrally handles the means to access multiple AWS profile and business software. By using AWS SSO near to Okta, end users have access to almost all their tasked AWS levels and you may applications in one single venue, simplifying availableness management for clients and you may directors. Today OkCupid normally scale up its AWS impact and you may make the most of more characteristics in place of a boost in management functions. With this specific services, OkCupid keeps high shelter, saves time and money, and you will takes care of employee accounts and you may permissions easily.

“AWS SSO try an effective unit to get the maximum number of good use for every single personnel so as that we are able to continue our party small.”

Maintaining just one Access point to have Numerous AWS Levels

OkCupid operates globally and should follow OkCupid affinity vs Plenty of Fish numerous investigation compliance statutes including the Eu Union’s Standard Studies Shelter Controls. Although business goes beyond conformity to safeguard affiliate analysis. “To engage efficiently for the application, users need inform you the really individual selves, for example gender identity and you may political philosophy,” shows you Alexander Dumitriu, Chief Advice Manager within OkCupid. “I take all of our purpose to guard the users’ pointers really definitely.”

In advance of OkCupid began playing with Okta inside the later 2016, they faced challenges trying to centralize IAM because of its into-premises surroundings. Personnel previously had to join on their own every single environment, definition that they had observe multiple passwords. Administrators must recite options into the per membership, an occasion-ingesting process. “While chasing after off several places to add or eradicate an excellent representative, you are not simply throwing away time but also improving the chances you to possible miss one thing,” says Dumitriu. “That’s a security concern.” Okta authored one to place where OkCupid you will definitely impose procedures, carry out profiles, and availableness permissions all over multiple identity silos. “We love the user experience with Okta, including Okta Verify’s push-founded two-basis verification,” says Dumitriu. “It’s safer than just Sms and better than learning other authenticator app.” That with AWS SSO and Okta, OkCupid could possibly retain the higher level of features and simplicity of repairs it offers struggled to get to.

Whenever OkCupid decided to benefit from the measure and you can speed it is possible to on the cloud, the capability to integrate AWS SSO which have Okta starred a switch part within the choice to move to AWS. OkCupid planned to use the full-range from AWS functions, but that would trigger a complicated bequeath out of AWS accounts one, in the event the reached . The new business agility off AWS SSO and you will Okta solved you to disease. “AWS allows us having a central membership where i carry out our very own users without having any limitation to go from inside the and you will arrange for every membership one by one,” says Lou Benlahmr, elderly system professional during the OkCupid. “They minimizes government some time provides way more visibility and you will an excellent even more granular solution to carry out usage of different membership.”