Santander secures APIs across Nordic markets
Santander logo

Santander secures APIs across Nordic markets

Santander Nordics is part of Banco Santander, one of the world's largest financial groups. Operating in Finland, Sweden, Norway, and Denmark, it is one of the leading auto-financing and consumer lending banks.

Objectives and Challenges

As one of the leading banks in the Nordic region focused on loans, credits, deposits, and insurance, Santander needed a strong solution to address API security. They sought a solution to protect sensitive customer data, meet regulatory requirements, and secure API authentication and authorization. They also needed a system that could support several authentication methods, including those based on national IDs, which are common in the Nordic region.

Selection Process

Santander reviewed several competing solutions to find the best match for their needs. They were specifically looking for a solution that used OAuth, could effectively protect their APIs, and offered both scalability and customization to support their current infrastructure and future growth.

The Curity Identity Server emerged as the top choice. One of the deciding factors was that it is built on industry standards like OAuth and OpenID Connect. Plus, it offered strong identity management along with API access control. The scalability of features meant it could grow with Santander’s expanding digital services, and its customizable features allowed for smooth integration into existing systems and workflows.

Deployment

The deployment of the Curity Identity Server was done by Santander themselves. The team was able to smoothly integrate the solution into Santander’s existing systems. The main focus was on enhancing API security and ensuring the solution operated seamlessly within their environment, supporting various authentication methods.

Results

Since implementation, the Curity Identity Server has proven to be highly effective in terms of performance and scalability. The system has successfully secured API authentication while allowing for rich, customizable authentication flows. The ability to enrich authentication data and integrate seamlessly with internal systems has been a significant benefit. Additionally, the deployment has made it easier to onboard internal clients. Most of the process is now automated and API access management is simplified.

Santander has been pleased with the support they receive from Curity. Tailored training sessions have helped the team configure and use the system effectively, ensuring that they follow best practices.

We’re really happy with the support from the Curity team. They’re quick to respond whenever we reach out. The training sessions we got from Professional Services were super helpful too, giving us the insights we needed.

Looking ahead, Santander plans to expand their use of the Curity Identity Server by exploring more of the product’s powerful capabilities. This will help them further enhance the security and flexibility of their authentication processes, allowing Santander to continue meeting the evolving needs of their customers while maintaining a high standard of digital security.

It's important that we have the ability to customize and enrich authentication flows internally. This ability is crucial for us.
Marc Roy Bruun-Forrester

Marc Roy Bruun-Forrester

Leader of PaaS Platform

Read More Customer Stories

See all customer stories
dmTECH secures online sales story cover

dmTECH secures online sales

Ziklo Bank upgrades access story cover

Ziklo Bank upgrades access

Tele2 makes login easier story cover

Tele2 makes login easier

SproutLoud integrates via APIs story cover

SproutLoud integrates via APIs

Skandia scales digital banking story cover

Skandia scales digital banking

Scandic modernizes guest login story cover

Scandic modernizes guest login

Poppulo goes API-first story cover

Poppulo goes API-first

PayEx simplifies integrations story cover

PayEx simplifies integrations

PagerDuty deploys across regions story cover

PagerDuty deploys across regions

One truth for Maersk Customs story cover

One truth for Maersk Customs

Nowcom hardens login security story cover

Nowcom hardens login security

Ikano Bank streamlines identity story cover

Ikano Bank streamlines identity

If powers partners, customers and AI story cover

If powers partners, customers and AI

ICA centralizes access story cover

ICA centralizes access

HealthHero future-proofs care story cover

HealthHero future-proofs care

Entercard meets banking regulation story cover

Entercard meets banking regulation

E.ON moves to modern identity story cover

E.ON moves to modern identity

Dun & Bradstreet unifies access story cover

Dun & Bradstreet unifies access

Cuviva secures digital care story cover

Cuviva secures digital care

Björn Lundén unifies login story cover

Björn Lundén unifies login

Bankdata modernizes identity story cover

Bankdata modernizes identity

Arion Banki secures Open Banking story cover

Arion Banki secures Open Banking

Arelion secures the internet’s backbone story cover

Arelion secures the internet’s backbone

ATG moves to microservices story cover

ATG moves to microservices