The primary goal was clear – to simplify the usage of the company's numerous sites and services for both end users and employees. The existing system required users to maintain separate login credentials for each service, complicating the user experience and reducing engagement. Our task was to streamline this process, ensuring easy access while maintaining the highest standards of security and privacy.
Our approach to implementing Drupal SSO was multifaceted, focusing on meticulous planning, state-of-the-art technology, and user-centric design. Here's how we tackled the challenge:
We began with an in-depth analysis of the requirements for SSO across the services that would utilize it. This step involved understanding the specific needs of each service, ensuring that the SSO solution would be both comprehensive and flexible.
We chose OAuth and OpenID Connect as our authorization protocols, due to their widespread adoption and robust security features. Additionally, we developed an extended API for data synchronization that addressed technical requirements beyond the specifications of OAuth and OpenID Connect. This ensured a seamless and secure integration across services.
Recognizing the importance of user experience, we designed the frontend with the latest design trends in mind, breaking down complex forms into step-by-step processes. This approach made the system more intuitive and user-friendly.
As a pilot launch for the Drupal SSO system, we are currently integrating it with the client's eCommerce site, including migrating user data to the new Drupal SSO platform. This step was crucial for testing the system in a live environment and making necessary adjustments before a full rollout.
Following the successful pilot, we will continue implementing the Drupal SSO system across other company services and websites. This phased approach allows us to manage the transition smoothly, minimizing disruption and gathering user feedback at each stage.
Post-implementation, we will continue to support the Drupal SSO platform, making adjustments and enhancements to accommodate new integrations. This ongoing commitment ensures that the system remains up-to-date and continues to meet the evolving needs of the company and its users.