Brief

The ICE project objective is to ensure that BMA members have consistent, high quality experiences across all products and services offered to them. To achieve this, it is important that they can use the product and services with seamless access.

Challange

BMA has many products and services offered to their members, those products and services are from different vendors and built on different technologies like Lotus Notes, Java, Hire wire etc. Many of those products and services needs authentication, for which members are currently required to hold multiple username(s)/password(s) to be able to access these products and services resulting in a poor customer experience. Members should be able to access products & services using single sign on(SSO) resulting in an improved customer experience (ICE).

PearlArc has designed an infrastructure which is named as Identity Access Management as part of ICE project.

The project has three components for Seamless member access as below.

• Single sign on via OAuth and OpenID Connect

• Integration to third party content providers using Reverse proxy (IP Based authentication)

• 3rd party verification (verification of membership to access discounts and services)

Solution

OAuth 2.0 is the industry-standard protocol for authorization. OAuth 2.0 supersedes the work done on the original OAuth protocol created in 2006. OAuth 2.0 specification defines a delegation protocol that is useful for conveying authorization decisions across a network of web-enabled applications and APIs.

PearlArc built a system based on OAuth2.0, it is identified as the best solution. And we identified Identity Framework is the best framework for implementation of OAuth 2.0 and OpenID. The application can be well integrated with other applications by just providing ClientID and Client Secret and can involve in Single Sign On.

Identity Access Management has been built on the Microsoft Technologies like ASP.Net Core 2.0, C#, Identity Framework 4.0, MS Azure SQL.

Results

Identity Access Management solution is now the core of BMA IT environment. It is the central service which helps in collaborating or integrating any new application easily. And all the products and services are integrated and accessible with single user credentials. Now BMA members no more required to remember multiple credentials.