Search Results:
×The global telecommunications leader KDDI faced substantial authentication challenges when they attempted to link with Thinkific for their training needs. The current identity provider at KDDI operated with the SAML protocol, but Thinkific needed JWT authentication, which resulted in a basic protocol compatibility issue. The main obstacles they encountered included:
KDDI achieved a complete authentication bridge through miniOrange's identity brokering solution, which fixed their protocol mismatch problems while improving security and user experience.
The miniOrange service operates as a smart broker that converts KDDI SAML assertions into Thinkific JWT tokens. The protocol conversion method protects all security attributes throughout the process while keeping authentication integrity intact. The system performs thorough token validation and verification checks throughout the authentication process and includes extensive error-handling mechanisms for authentication failures.
The solution creates a centralized directory that keeps user information synchronized between systems and automatically sets up Thinkific user accounts after successful authentication. The pre-authentication verification system checks user eligibility before authentication continues by correctly mapping SAML assertion identity attributes to JWT claims.
Each authentication request must pass through multiple validation procedures that verify origin data, check token signatures and encrypt important information. The system uses strict access controls that derive from user attributes and organizational roles while generating detailed audit logs for security monitoring and compliance reporting.
The adaptable identity brokering system allows KDDI to support multiple identity providers, which enables support for different business units and user types. The solution features modular architecture, which enables easy addition of new applications and authentication sources to support KDDI's evolving needs with built-in redundancy for authentication service availability.
KDDI implemented miniOrange CIAM to solve authentication challenges, which resulted in faster logins and enhanced security measures. The system improvement delivered better user experiences and improved compliance and training efficiency while reducing IT operational costs. Here are the results achieved post-deployment:
KDDI is a major telecommunications company that provides services to various customer segments in the Asia-Pacific region. Their communications infrastructure is used by people, businesses, and institutions around the world. KDDI has built a secure identity ecosystem that enhances their compliance posture and provides customized and integrated authentication flows for users through the implementation of miniOrange's identity brokering solution.