Exec Summary
OkCupid simplistic their multiple-membership title and supply management and you will enhanced safety when you are protecting go out and money by using AWS. The internet dating website and you will app began moving from the towards-site options in order to AWS, also to take care of a main section away from access because of its individuals AWS levels, it put AWS SSO alongside AWS Lover Okta’s Common List, deploying a different reason for AWS SSO in two weeks. The solution automates associate account development and you may configuration, decreasing the likelihood of people error and you may growing safeguards. As migration, the brand new lean operations people can be attention it is time for the improving the user experience having OkCupid’s countless pages and then make meaningful connections.
Developing an approach to Explain Multiple-account Management
OkCupid, one of the primary 100 % free dating sites and software, prioritizes protecting the non-public investigation of their an incredible number of profiles and work out important associations. Inside 2016, the business aided safer their backend because of the centralizing identity and you may supply administration (IAM) which have Okta Inc, a primary title and you may coverage providers and you can Amazon Websites Qualities (AWS) Companion. During the mid-2020, OkCupid began migrating from its into the-site program so you can AWS, in which it build an approach to further clear up multi-membership government: having fun with AWS Solitary Sign-Toward (AWS SSO) along side Okta’s Common List.
AWS SSO centrally manages use of several AWS profile and you may providers programs. By using AWS SSO next to Okta, customers have access to all their assigned AWS account and applications in one single venue, simplifying access administration to possess clients and you may directors. Now OkCupid can scale-up their AWS footprint and you will make use of various other features versus a boost in administrative really works. With this provider, OkCupid retains higher coverage, saves time and money, Professional dating sites and you will handles staff member membership and you will permissions effortlessly.
“AWS SSO is actually a powerful unit to obtain the limitation count beneficial for each worker to make certain that we can keep our very own class brief.”
Keeping just one Entry way to have Numerous AWS Profile
OkCupid works international and should conform to several investigation conformity laws like the Eu Union’s Standard Investigation Safeguards Control. Nevertheless the providers goes beyond compliance to guard affiliate studies. “To activate properly to the app, profiles must reveal the most private selves, instance gender title and governmental philosophy,” teaches you Alexander Dumitriu, Head Pointers Officer on OkCupid. “We simply take our purpose to protect all of our users‘ information extremely certainly.”
Just before OkCupid first started playing with Okta into the late 2016, it faced demands trying to centralize IAM for the on-premises environment. Employees before was required to visit individually every single ecosystem, meaning that they had to keep track of several passwords. Administrators had to repeat setup inside the each account, a time-ingesting techniques. “While chasing off multiple metropolitan areas to include otherwise beat a great member, you’re not only wasting big date in addition to enhancing the opportunities you to definitely you can easily skip things,” claims Dumitriu. “That is a safety question.” Okta created one to lay where OkCupid you can expect to demand policies, carry out pages, and you will availability permissions around the numerous title silos. “We like the consumer experience with Okta, particularly Okta Verify’s push-established several-grounds verification,” says Dumitriu. “It’s better than simply Texts and higher than determining almost every other authenticator software.” That with AWS SSO and Okta, OkCupid could probably keep up with the advanced level off features and you will convenience of restoration it’s struggled to achieve.
Whenever OkCupid chose to enjoy the measure and you will agility it is possible to on the cloud, the capability to feature AWS SSO that have Okta played a key role in decision so you’re able to move so you can AWS. OkCupid wanted to make use of the full-range off AWS services, but that would trigger a complicated give regarding AWS profile you to definitely, when the accessed . Brand new business speed of AWS SSO and you will Okta set that condition. “AWS enables us for a central membership in which i would all of our pages without the constraint to visit in the and you may arrange for every account 1 by 1,” says Lou Benlahmr, senior structure engineer at the OkCupid. “They decrease government time and provides a whole lot more profile and you will good more granular way to do usage of more membership.”