Business objectives
Arion Banki spent significant amounts of time and effort developing its own security solutions and then even more time updating them in accordance with the latest security developments and practices. This work required a lot of coding and sharp focus from the development teams to ensure the security of the bank’s systems.
This became difficult to keep up with, and Arion Banki identified a need to find a standards-based solution. They wanted a solution that would allow them to centralize identity management and login and enable the identity and access management team to focus on solving the actual business cases.
Selection and Solution
When the Arion Banki team started their search and evaluation, they were specifically looking for solutions supporting the OAuth and OpenID Connect protocols.
Their requirements in short:
- Standards-based
- Wide customization options
- Smooth developer and customer experience
After evaluating several solutions, they found that the Curity Identity Server was the best fit for their needs. The Curity Identity Server allowed them to implement all the needed protocols out of the box and the built-in support for containerization enabled easy deployment in the cloud.
It has saved us a lot of time not focusing on implementing new security mechanisms ourselves. Curity takes care of the standards and keeps the product up to date. That’s very comforting.
Results
With the Curity Identity Server in place, Arion Banki have established a system based on the latest standards to secure their applications and services. The flexibility and customization capacity of the Curity Identity Server allows them to implement their own custom workflows and claim issuance.
The Open Banking protection implemented with the help of the Curity Identity Server works really well for them. They are currently looking forward to starting using DevOps Dashboard to create clients and incorporating Hypermedia Authentication API into their online banking offering and mobile apps.
The Arion Banki team appreciates the vast number of ready-made authenticators and easy-to-use Admin UI of the Curity Identity Server. They are up to date with the latest standards and can leverage them, including WebAuthn, without having to build it themselves.
They are really impressed by the resources, technical support, and documentation that Curity provides. They feel their feedback is heard and they really appreciate the speed and efficiency of the instant messaging support.