OFF THE SHELF PRODUCTS LACK FLEXIBILITY AND COST EFFECTIVENESS
Off the shelf and SaaS-based identity providers (IdPs) are often not flexible enough to accommodate custom authentication workflows required by many enterprise customers.
Many other IdPs do not implement OAuth/OIDC protocols true to the IETF specifications which causes long-term support issues and interoperability challenges.
Licensing and subscription fees for commercially supported versions of other solutions often have a dramatically higher Total Cost of Ownership and lower Return on Investment.
OWN YOUR IMPLEMENTATION AND DATA
Solliance’s Duende builds provide highly configurable templates that can be tailored to an endless variety of authentication workflows, as well as full control over the user interface, user experience, business logic, and data.
Our builds are based on strict adherence to over a dozen OpenID Foundation and IETF standards which we have threat-modeled and proven at scale.
Our Duende builds can run wherever and however you need: on-premise or cloud, public-facing or private VPN, Windows or Linux, VMs or Containers (including Docker or Kubernetes).
Solliance Value-Added Templates & Features
BASELINE TEMPLATE
- DIY or leverage Solliance services
- App integration samples
- Standard authentication flows
- Self-service User Interfaces
- Error handling
- Content Security Policy (CSP)
- Brute force protection
- Basic MFA (email + SMS)
- Log integration
ENHANCED TEMPLATE
- Administrative UIs intended for support / help desk staff
- Optional Impersonation features
- Optional APIs for self service and admin functions
- Optional integration with your legacy user store
ADVANCED FEATURES
- Advanced MFA (authenticator apps, FIDO, custom providers)
- Risk-based authentication
- Federation (SP-initiated, IDP-initiated, or gateway)
- Multi-tenancy
- Home realm discovery
- Device management for mobile
- Configuration database + API
FEATURES
In addition to the Duende run-time IDP engine, Solliance has developed a variety of templated features commonly required by customers that need to provide a seamless login and registration experience for consumers, customers, employees, vendors, and supply chain use cases.
SELF-SERVICE WORKFLOWS
Our self-service workflows include:
- Registration
- Verify my identity / email
- Manage my profile
- Forgot password
- Change password
- Manage my MFA
- Manage my mobile device
ADMINISTRATION WORKFLOWS
Our administration workflows include:
- Search & list my users
- Create & invite new users
- Change or drop users
- Manage activation status
- Initiate email and password resets
- Impersonation
ADVANCED OPERATIONS
Our advanced operations include:
- Multi-tenancy
- Advanced MFA
- Federation Gateway
- SP or IDP Federation
- Social Login Integration
- Configuration Database for at-scale CI/CD DevOps deployments
SERVICES + SUPPORT
DUENDE UPGRADES
Solliance has a team dedicated to helping customers with existing open-source IdentityServer implementations upgrade to the latest .NET6 Duende target. Services typically include:
- Binary Updates: upgrading the core IdentityServer binaries and unit tests
- Developing Testing Plans: custom app integrations, user login experience
- Developing Release Plans: DevOps deployments, roll-out, roll-back, roll-forward
- Production Support: Our experts paired with your team during Go-Live
ARCHITECTURE DESIGN STRATEGY
At Solliance, our cybersecurity practice specializes in identity protocols, integrations with identity providers including IdentityServer, Azure AD, Auth0, Okta, Ping Federate, OneLogin and others. We understand how the various protocols and components need to work together to deliver delightful experiences for your customers and employees. We can help you design your identity workflows, including Federation, User Onboarding, Impersonation for Customer Support use cases, and API security.
DUENDE + SOLLIANCE DIY TEMPLATES
If you have a lot of experience already with Duende, we offer Do-It-Yourself solutions that provide you with our templated “building blocks” so you can enhance your identity server at your own pace and with your own development teams.
FULL SERVICE DEVELOPMENT & CUSTOMIZATION
If you don’t have in-house IdentityServer experience, or if your teams are swamped with working on business apps, we can help by providing a lean but highly-skilled and effective team of experienced Duende developers.