noriba
EN DE
Book a consultation

// CASE STUDY

Central User Management Service

Production release for customer's internal and external authentication and authorization needs.

Year
2024
Dev team
5 eng.
Users
1000
Duration
6 to 12 months

// 01 Result

Production release for customer's internal and external authentication and authorization needs.

// 02 Used technologies

  • AWS
  • AWS-dynamodb
  • AWS-cloudWatch
  • AWS-SNS
  • AWS-SQS
  • AWS-lambda
  • AWS-apiGateway
  • REST API
  • AWS-s3
  • AWS-Cognito
  • GitHub
  • GitHub-CICD
  • Python
  • GO-LANG
  • AWS-IAM

// 03 Challenge

High demand on security and quality at all stages.

The central user management service meets the demands for a central identity and access management solution, addressing challenges in granularity, project-wide applicability, maintenance, and monitoring. Features:

Full AWS Cognito Integration

User pool for secured and streamlined authentication process for web and mobile Identity pool for fine-grained authorization process Access & ID Token claims and scope synchronization

For any number of product specific attributes, data are kept in sync between User Management storage and generated tokens Backup and restoration

Empower administrators with the ability to create and restore backups of user data, providing a safety net for critical information and disaster recovery scenarios User white-listing

Enhance security by easily white-listing specific users, ensuring that only selected individuals or groups have access to our systems Real-time notifications

Stay in the loop with instant notifications when a new base or product user is created/updated/removed or when attributes are modified, allowing for timely response and action Time-to-live (TTL) configuration

Efficiently manage user data housekeeping by automatically removing outdated information based on customizable time-to-live (TTL) settings CRUD operations on users and groups

Take control of user and group management with the ability to perform Create, Read, Update, and Delete (CRUD) operations effortlessly GDPR and company-wide compliance

Services are identifying and exchanging sensitive user information only via internal user id hash Ensuring every event or runtime data are stripped from sensitive data prior logging Authentication variants

MagicLink web & mobile authentication Authentication for machine users Federated user authentication with OIDC ‍

Central User Management Service architecture diagram
← Back to work