Executive Conclusion
OkCupid simplistic its multi-account term and you may availability administration and you will improved protection while you are preserving big date and money by using AWS. The web based dating site and you may software began migrating from the on-properties solutions to AWS, and also to care for a main area regarding availableness for the some AWS profile, they used AWS SSO alongside AWS Lover Okta’s Common Index, deploying another purpose of AWS SSO in 2 weeks. The solution automates associate account production and you may setting, reducing the danger of individual mistake and you will broadening coverage. Since the migration, the fresh slim functions cluster can desire it is time to your raising the consumer experience to have OkCupid’s many profiles and work out important connectivity.
Development an approach to Express Multi-account Administration
OkCupid, one of the primary free adult dating sites and you may programs, prioritizes protecting the private research of its an incredible number of profiles and also make significant connections. Into the 2016, the company assisted secure their backend by the centralizing label and accessibility management (IAM) which have Okta Inc, a primary identity and you can coverage team and Auction web sites Online Functions (AWS) Spouse. During the middle-2020, OkCupid first started moving from its on-properties program to help you AWS, in which it set up an approach to after that express multiple-membership administration: having fun with AWS Unmarried Indication-Towards (AWS SSO) with Okta’s Universal Index.
AWS SSO centrally manages use of multiple AWS profile and you may providers apps. That with AWS SSO near to Okta, end users can access all their assigned AWS account and you will programs in one location, simplifying supply administration to possess end users and you will administrators. Now OkCupid can be scale up their AWS impact and you may benefit from various other properties instead a boost in management functions. With this specific solution, OkCupid preserves high safeguards, conserves time and money, and handles staff account and you can permissions with ease.
“AWS SSO is actually an effective unit to find the maximum matter of good use for each and every employee in order that we could remain all of our party brief.”
Maintaining one Access point to have Several AWS Account
OkCupid works international and must conform to several study conformity statutes like the Western european Union’s General Investigation Safeguards Control. However the providers goes beyond conformity to protect user research. “To activate properly for the app, profiles need to tell you its extremely personal selves, such as for example gender title and political philosophy,” teaches you Alexander Dumitriu, Master Guidance Officer during the OkCupid. “We simply take the goal to protect the users’ pointers extremely surely.”
Ahead of OkCupid began using Okta when you look at the later 2016, they encountered demands trying to centralize IAM for its on-premise environments. Team previously was required to join individually to each ecosystem, meaning they’d to keep track of numerous passwords. Administrators had to repeat configurations for the each membership, a time-ingesting process. “When you’re going after down numerous urban centers to incorporate otherwise dump good associate, you’re not simply throwing away big date and also increasing the opportunities you to possible skip something,” states Dumitriu. “Which is a protection question.” Okta created that lay where OkCupid you can expect to impose policies, perform users, and access permissions all over numerous identity silos. “We like an individual expertise in Okta, such as for instance Okta Verify’s push-created several-foundation verification,” states Dumitriu. “It is safer than Text messages and higher than just finding out almost every other authenticator software.” By using AWS SSO and you can Okta, OkCupid could probably take care of the advanced level out of functionality and you can capability of fix it’s got struggled to achieve.
Whenever OkCupid decided to take advantage of the scale and you will speed you are able to about cloud, the capacity to add AWS SSO with Okta starred a button role in decision to help you move to AWS. OkCupid wished to use the full-range off AWS attributes, but who bring about an intricate bequeath out-of AWS profile that, in the event the accessed . This new business speed off AWS SSO and you will Okta solved you to state. “AWS enables us to own a central membership where i manage the pages with no restriction to visit during the and you may arrange for each and every membership one by one,” states Lou Benlahmr, senior system engineer at OkCupid. “They decreases administration some time and provides far more visibility and you may good alot more granular cure for carry out access to some other levels.”