Practitioner thinking, from the people doing the work.

Introduction A leading financial institution experienced a critical authentication failure when 2.7 million users were unintentionally removed from its Customer Identity and Access Management (CIAM) system. This resulted in widespread login failures, service downtime, and major disruptions to digital banking services. Midships was engaged to rapidly resolve the incident and implement proactive measures to prevent recurrence. The Challenges Mass Authentication Failures A sudde

Executive Summary Migrating from a self-managed on-premise Ping AIS environment to the cloud-hosted SaaS Ping AIC can feel like navigating uncharted waters. At Midships, we’re here to light the way. Our free Cloud Migration Assessment is a comprehensive, automated evaluation designed specifically for PingIdentity customers to streamline your migration planning and mitigate risks before you take the plunge. A Smarter Approach to Migration The Midships Cloud Migration Assessmen

Introduction One of the largest gaming service providers in Asia sought to modernize its Customer Identity and Access Management (CIAM) ...

From a Tech Conference to a Traditional Wedding Our CEO Ajit Gupta , recently attended a conference in the USA with #PingIdentity, where the latest advancements in biometric authentication, security, and identity verification were discussed. The event focused on facial recognition, AI-powered fraud detection, and next-gen identity solutions. Immediately after, he travelled to India for a wedding—a stark contrast to the world of tech. But, to his surprise, he saw something tha

Preface At Midships, we take pride in our originality, not merely conforming to the norm. Our dedicated team devotes considerable time to comprehensively grasp the distinct challenges faced by our clients and their customers, continually seeking enhancements. This necessitates the abandonment of entrenched biases and the dismissal of the idea that the way things are commonly done is an acceptable justification. With the digital age upon us, the expectation that services are A

Over recent months, the team and I have been answering this question, should I be using IDaaS? For the most part, IDaaS was not a solution that suited many of our customers needs, but with the new ForgeRock Cloud Identity solution becoming available shortly, we think this may be about to change. This blog is intended to help you determine whether IDaaS is right for you. Before I get into the crux of this, let’s remove a couple of the fallacies that keep coming up: IDaaS does

Keep the User Store Clean Over time, dormant user profiles and historical device profiles can accumulate in the user store (directory service), resulting in a significant portion of unused data. This paper presents a simple solution to keep the user store clean by maintaining only active user profiles and device profiles. This solution includes a directory service clean-up process and alterations to the Access Management (AM) Authentication Tree to manage dormant user journey

Executive Summary This paper outlines Midships’ approach to combat social engineering fraud, focusing on the scenario of phone call-based...

Executive Summary In this paper, we present Midships' solution for digital transaction signing that enhances the security and integrity of digital banking services. The solution is built on Passwordless and FIDO principles, utilising device-level PKI to facilitate transaction signing. The private key is securely stored in the user's device, while the public key is registered with the backend. This method ensures zero knowledge of the user's signing credential on the backend s