Administrator Summation
OkCupid simplistic the multi-membership title and you may supply administration and you can enhanced defense if you’re preserving time and cash that with AWS. The internet dating site and you may app began migrating from the toward-properties assistance in order to AWS, also to take care of a main point off supply for its various AWS accounts, they put AWS SSO close to AWS Partner Okta’s Common Directory, deploying a new function of AWS SSO in two days. The answer automates member membership development and setting, decreasing the risk of individual error and you can broadening defense. Once the migration, new lean businesses party normally attract it is time on the improving the user experience getting OkCupid’s scores of pages while making significant connectivity.
Developing a solution to Explain Multiple-account Government
OkCupid, one of the greatest totally free adult dating sites and you can programs, prioritizes securing the private data of its scores of users while making meaningful connections. Within the 2016, the organization aided secure the backend by centralizing label and availableness administration (IAM) having Okta Inc, a primary term and defense company and you may Auction web sites Websites Features (AWS) Partner. Inside the middle-2020, OkCupid began migrating from the with the-premise system to AWS, where it create an approach to then clarify multiple-account management: playing with AWS Single Signal-Toward (AWS SSO) in conjunction with Okta’s Universal Index.
AWS SSO centrally manages the means to access several AWS account and company programs. That with AWS SSO near to Okta, customers can access all their tasked AWS membership and you can apps in one single place escort girls in Providence RI, simplifying availability government to have customers and you may directors. Today OkCupid normally scale-up the AWS footprint and you may make the most of more services in the place of a rise in management works. With this particular services, OkCupid retains large security, preserves money and time, and takes care of worker profile and permissions with ease.
“AWS SSO are a strong tool to get the limitation matter helpful for every employee so that we can remain our team brief.”
Keeping an individual Access point to possess Multiple AWS Levels
OkCupid operates global and should comply with numerous investigation conformity regulations including the European Union’s General Studies Cover Controls. But the organization goes beyond conformity to guard affiliate studies. “To activate successfully towards the software, profiles need to tell you their extremely private selves, for example intercourse name and you can political values,” teaches you Alexander Dumitriu, Master Suggestions Administrator within OkCupid. “We get our very own purpose to protect the users’ guidance most positively.”
In advance of OkCupid began having fun with Okta within the later 2016, they faced demands seeking centralize IAM for the on-properties environments. Employees in the past had to join alone every single ecosystem, meaning they had to monitor several passwords. Directors needed to repeat settings into the for every single membership, a period of time-sipping processes. “Whenever you are chasing after off numerous places to include or remove good representative, you aren’t only throwing away go out and in addition raising the possibilities one to you’ll be able to miss one thing,” states Dumitriu. “That is a security question.” Okta written you to lay in which OkCupid you will definitely demand rules, do profiles, and you can accessibility permissions all over numerous name silos. “We love the consumer experience in Okta, particularly Okta Verify’s push-founded two-factor authentication,” states Dumitriu. “It’s safer than simply Texts and higher than just figuring out most other authenticator software.” By using AWS SSO and you will Okta, OkCupid can maintain the advanced regarding usability and you can capability of maintenance it’s worked hard to get to.
Whenever OkCupid chose to gain benefit from the level and you will agility you’ll on the affect, the ability to integrate AWS SSO with Okta starred an option role within its decision so you’re able to move so you can AWS. OkCupid wished to utilize the full-range away from AWS qualities, but that would produce a complex spread away from AWS levels you to, if the utilized . Brand new business agility out-of AWS SSO and you can Okta repaired that condition. “AWS allows us to own a main account where we create all of our users without the limitation commit in and arrange each account one after another,” claims Lou Benlahmr, senior infrastructure engineer on OkCupid. “They minimizes government time and gives us significantly more profile and you may a much more granular cure for manage the means to access additional levels.”