Objectives and Challenges
As one of the leading banks in the Nordic region focused on loans, credits, deposits, and insurance, Santander needed a strong solution to address API security. They sought a solution to protect sensitive customer data, meet regulatory requirements, and secure API authentication and authorization. They also needed a system that could support several authentication methods, including those based on national IDs, which are common in the Nordic region.
It's important that we have the ability to customize and enrich authentication flows internally. This ability is crucial for us.
Selection Process
Santander reviewed several competing solutions to find the best match for their needs. They were specifically looking for a solution that used OAuth, could effectively protect their APIs, and offered both scalability and customization to support their current infrastructure and future growth.
The Curity Identity Server emerged as the top choice. One of the deciding factors was that it is built on industry standards like OAuth and OpenID Connect. Plus, it offered strong identity management along with API access control. The scalability of features meant it could grow with Santander’s expanding digital services, and its customizable features allowed for smooth integration into existing systems and workflows.
Deployment
The deployment of the Curity Identity Server was done by Santander themselves. The team was able to smoothly integrate the solution into Santander’s existing systems. The main focus was on enhancing API security and ensuring the solution operated seamlessly within their environment, supporting various authentication methods.
Results
Since implementation, the Curity Identity Server has proven to be highly effective in terms of performance and scalability. The system has successfully secured API authentication while allowing for rich, customizable authentication flows. The ability to enrich authentication data and integrate seamlessly with internal systems has been a significant benefit. Additionally, the deployment has made it easier to onboard internal clients. Most of the process is now automated and API access management is simplified.
Santander has been pleased with the support they receive from Curity. Tailored training sessions have helped the team configure and use the system effectively, ensuring that they follow best practices.
We’re really happy with the support from the Curity team. They’re quick to respond whenever we reach out. The training sessions we got from Professional Services were super helpful too, giving us the insights we needed.
Looking ahead, Santander plans to expand their use of the Curity Identity Server by exploring more of the product’s powerful capabilities. This will help them further enhance the security and flexibility of their authentication processes, allowing Santander to continue meeting the evolving needs of their customers while maintaining a high standard of digital security.
