Background
Over time, dormant user profiles and historical device profiles can accumulate in the user store (directory service), resulting in a significant portion of unused data. This paper presents a simple solution to keep the user store clean by maintaining only active user profiles and device profiles. This solution includes a directory service clean-up process and alterations to the Access Management (AM) Authentication Tree to manage dormant user journeys. Consequently, organisations can lower their license costs and optimise the user store's size (which is important for speed of backup & restore).
PROBLEM STATEMENT
The Bank faced significant risks due to the impending End of Life of FRAM 6.5, which could lead to loss of product support and non-compliance with industry standards. The high license fees for the existing DAON biometric authentication solution added to the challenge.
Technical Challenges
The project involved several technical challenges:
GOAL
The objective was to upgrade the Bank’s FRAM 6.5 to 7.4 within a 6-month timeframe using the Midships Ping/ForgeRock Accelerator.
This included migrating from the existing DAON biometric solution to ForgeRock’s integrated FIDO2 authentication, thereby reducing license costs. The project also aimed to ensure smooth transition of all customizations, configurations, and integrations, optimizing system performance and maintaining service continuity.
TIMELINE
The project was completed within a 6-month period, from initial planning to final production release.
This included migrating from the existing DAON biometric solution to ForgeRock’s integrated FIDO2 authentication, thereby reducing license costs. The project also aimed to ensure smooth transition of all customizations, configurations, and integrations, optimizing system performance and maintaining service continuity.
Products
01
Migrated AM
02
Updated IDM, DS, and IG to be compatible with FIDO2
Benefits & Results
The upgrade and migration project yielded significant benefits for the Bank: