Skills Needed
Ping Access, Ping Federate and Site Minder.
Business Requirements
Architect a solution where all the bank's web applications can be accessed by logging in from a single login screen.The user experience should be that users will be authenticated one time and be able to access all the applications under the same web session.These web applications should be accessible by authenticating both employee accounts and member accountsThe solution should provide for members and/or employees the ability to make requests for new access or changes access to bank services.The solution should provide for members and/or employees the ability self-service password reset.The solution should support Multi-Factor Authentication (MFA) for both employee and member accounts.
Technical Requirements
Establish the capability to federate employee identities with Azure to allow employees to access Azure/Office 365 assets from both inside and outside of our network.Identify a solution that will allow for multiple Identity Providers (IdP) and Identity stores. These identity stores will primarily leverage Microsoft Active Directory and/or Azure Active Directory.In the future, some application services may be provided through Azure. The identity architecture should be able to accommodate this future need.
This engagement will:
Outline the options available to using Azure, Ping Access and Ping Federate and discuss pros and cons with our architectsDocument a technical architecture the proposed solution in coordination with our architectsAssist in performing a POC that includes configuring a development environment that integrates with Azure AD, a on premise instance of Active Directory and test instances of the existing applications.Assist in developing a conversion plan that will include migration of accounts and applications from the existing infrastructure to the future state architecture.Read Less
