The customer is one of the largest banking and insurance holding companies in the UK. They used Ping Data Governance (PDG) to centrally manage and control access to identity and profile data within the organization. PDG was reaching End of Life and was supposed to be replaced with Ping Authorize. The team identified several issues with this migration: migration activities requiring config and custom adapter/plugin updates, some custom adapters and plugins not supported by Ping Authorize, no upgrade utility requiring manual reinstallation, high licensing and infrastructure costs, dependency on external vendors, and skills not available in-house.
The customer uses Ping Data Governance (PDG) to centrally manage and control access to identity and profile data within the organization. PDG was reaching EOL and was supposed to be replaced with Ping Authorize. The team identified few issues with this migration: Migration activities (Updates required for Configs & Custom adapters/plugins) Some of the custom adapters and plugins are not supported by Ping Authorize No upgrade utility, configs must be reinstalled manually. High licensing and infrastructure cost Dependency on external vendor for migration and other support Skill not available inhouse and expensive in the market to develop and maintain
After careful deliberation, a custom-build microservices approach was adopted:
- Built the APIs as Microservices per SCIM2 standards and base configuration catering to all customers.
- Extensible design supports One Identity Strategy and adheres to the customer’s Microservice architecture, design & security patterns.
- Built using Spring Boot, UnboundID LDAP and SCIM2 SDKs.
- Effective load balancing (PDG used direct server communication which degraded performance).
- Easy scalability leveraging customer’s PAAS PCF (Pivot Cloud Foundry), compared to PDG scaling which demands a minimum of 6 months.
- Enhanced security for Secret Management via Hashicorp Vault; earlier passwords were maintained and updated within PDG.
- Minimal or no involvement in Platform Upgrades (OS Patching / Upgrades etc).
.avif)
%20(30).png)
%20(33).png)
%20(32).png)
%20(31).png)
%20(29).png)
%20(28).png)
%20(27).png)
%20(26).png)
%20(24).png)
%20(23).png)
%20(22).png)
%20(21).png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
%20(2).png)
