Modernizing Identity Security for Freight Transportation Services

Our transportation services client relied on a legacy, in-house Customer Identity and Access Management (CIAM) solution that was hindering their growth and security posture. They engaged KeyData Cyber to implement Okta Customer Identity Cloud (CIC) as a modern SaaS solution to address several key business and operational challenges. Their core objectives were to:

Highlights

The Challenge

• Enhance Security and Reduce Operational Costs
• Combat Account Sharing and Strengthen Fraud Prevention
• Modernize Application Integration

The Solution

Our team partnered with the client to define clear Minimum Viable Product (MVP) success criteria aligned with their critical business objectives. Our approach included:

• Collaborative Requirements Gathering: Facilitated in-depth business and technical architecture workshops to meticulously gather comprehensive functional requirements, ensuring alignment with business needs.
• Strategic Architecture and Roadmap Design: Defined a future-state target architecture leveraging Okta CIC and created a phased implementation roadmap to guide the successful transition.
• Core Okta CIC Configuration and Customization: Configured the foundational Okta CIC settings, encompassing authentication policies, password management, branding elements, legal agreements, email notifications, SMTP configurations, and self-service password reset functionalities.
• Data Model Extension: Implemented schema extensions within Okta CIC to seamlessly incorporate the client's custom data model, ensuring data compatibility and integrity.
• Optimized User Journey Design: Defined and meticulously crafted user journeys, including intuitive user interfaces and tailored email notifications for critical workflows such as login, password recovery, and MFA enrollment.
• Advanced Security Feature Enablement: Enabled and customized advanced Okta CIC product features including Multi-Factor Authentication (MFA), Adaptive MFA for risk-based authentication, secure Passkeys for passwordless login, and breached password detection to proactively prevent compromised accounts.
• Standards-Based Application Integration: Integrated customer-facing applications utilizing industry-standard OIDC and SAML protocols, ensuring secure and modern connectivity.
• Real-time Log Streaming for Enhanced Monitoring: Enabled seamless log streaming to Azure Event Grid, providing real-time security monitoring and enhanced audit capabilities.
• Comprehensive User Acceptance Testing Support: Provided dedicated support for in-house User Acceptance Testing (UAT) across integrated applications, including proactive defect management and resolution.
• Streamlined Production Deployment and Migration: Orchestrated the production tenant deployment, efficient bulk user migrations of 18,000 accounts, and seamless application integrations, minimizing disruption to business operations.

Business Benefits

Our implementation of Okta CIC delivered significant and measurable business benefits for the transportation services client:

• Increased Agility and Faster Innovation: Modernized integration patterns through standards-based protocols and hosted login enabled faster and more efficient integration of new customer-facing services and applications.
• Strengthened Security, Minimizing Financial Loss: Implementation of custom Adaptive MFA policies and actions to significantly reduce account sharing and increase revenues.
• Improved Security Posture with Passwordless Options: Enabling Passkeys alongside the mobile authenticator application provided a stronger security posture by offering an optional phishing-resistant authentication method.
• Enhanced Customer Experience and Reduced Operational Costs: The implementation of a centralized, self-service identity directory streamlined user management, dramatically reducing IT support tickets and improving customer satisfaction by providing a smoother and more efficient user experience.
• Rapid Time-to-Value and Minimized Disruption: The project achieved a rapid 3-month time to production and successfully migrated 18,000 accounts and 4 applications within this timeframe.