Electronic Theatre Controls (ETC) is a global leader in the manufacture of lighting and rigging technology for venues large and small. As a premium marketplace innovator, the business' products are utilized in theaters, churches, hotels, schools, opera houses, and more across the globe.
\nAs business is thriving for the pioneering North American firm, it realized that maintaining it, however, is only possible by identifying and delivering opportunities that are of greater value for customers.
\nSo, when ETC's management turned its attention to customer web services (for example), ETC spotted a chance to leverage value by extending and improving its customer web offerings.
\nWhen ETC Controls began looking for a vendor, they were looking for someone experienced in meeting the needs of businesses like theirs. They wanted to find a partner who could help them achieve their goals and make the company more efficient.
\nETC web services, for example, are utilized by multiple user types (e.g., dealers, consumers). While these user groups have very different needs, ETC needed a partner capable of managing profiles throughout the business' digital ecosystem.
\nWhile ETC identified an opportunity to simplify its customer experiences across multiple platforms, its leaders also wanted to streamline data management: making it easier than ever before to gain insights into the business' online operations.
\nETC was impressed by LoginRadius' modular identity solution platform and its team's deep understanding of the complexities of managing and integrating identities with backend technologies.
\nComplying to the customer's needs, LoginRadius delivered a backend implementation of its reliable, secure services to ETC in an organized, methodical, and seamless way.
\nIt needed to be in order to ensure the system's successful integration with a number of platforms - including BigCommerce and HubSpot.
\nA plug-and-play solution, LoginRadius offers the industry's fastest average implementation. This help businesses work against tight deadlines while ensuring a best-in-class digital presence without overextending the company's budget.
\nBy introducing LoginRadius CIAM means that ETC now manages user identity centrally. LoginRadius allows ETC's team to create and manage unified consumer profiles that can be used throughout the business' entire digital ecosystem.
\nWorking with LoginRadius ensures there are no identity silos - enabling ETC to see consumers as a whole.
\nLoginRadius SSO supports a new identity management feature: single-sign on. Its introduction means users need just one login to access content across ETC's various web platforms.
\nWith support from LoginRadius, ETC successfully unified its multiple products within a single ecosystem - allowing the business - to gain a unified view of its consumers (and their behaviors).
\nThe centralized login system enables users to seamlessly navigate third-party sites without needing to log back whenever they return.
\nLoginRadius' advanced user segmentation and analytics tools deepen the team's understanding of its customers - creating opportunities to enhance targeting and personalization. Leveraging data from its reports allows the team to get the actionable insights they need to continue meeting customer expectations. LoginRadius' Consumer Insights tool provides ETC with crucial information, such as viewing preferences, recent interactions, and purchase history. When combined, details like these help the business target customers more efficiently in a variety of ways, including personalized offers and content. To guarantee ETC's success at every level, LoginRadius introduced dedicated account management and support from the outset… … and that continues to this day. Since completing their first project together, LoginRadius continues to work closely with the team as part of its larger, continuing activities. One of the leading municipalities known for biking and trekking in British Columbia is set to take off on its journey to digitize its citizenship services. The moment of truth came when the City decided to digitize its citizen services; it could never have predicted how valuable this modernization project would become. The City provides a wide range of services to its citizens, including recreational facilities, community building, etc. They join the dots to meet the needs of their residents to ensure a safe and livable community. Other services include taxes and utilities, garbage and waste diversion, and transportation. The City’s IT team started looking for a CIAM solution to help secure the identities and streamline the authentication process for all their citizens across applications. After exploring multiple providers, they decided to try LoginRadius for managing the identities. After a detailed discussion which included platform demonstrations and requirement gathering sessions, the client gained confidence and awarded the project to LoginRadius. Being the preferred choice by many other municipalities and with the experience LoginRadius brings to the table in similar projects, the choice was relatively easy for the City’s management team. It was a straightforward implementation for the City as there were no legacy applications that needed to be replaced, which meant no data migration. It took less than four weeks for the City’s IT team to implement the solution on their end. With all the resources and pre-built SDKs, it was a smooth implementation for them. The City went on to implement the LoginRadius Identity Experience Framework (IDX) - an out-of-the-box solution with pre-built user account flows. This solution had all major customer flows, including registration, login, forgotten password, account verification, and profile management. LoginRadius Identity Experience Framework pages are JavaScript, HTML, and CSS driven, meaning most of the logic is implemented using JavaScript. Hence, the city developer had to modify the design and script per their UI/UX requirements. Even though it is hosted on LoginRadius, the solution is also entirely white label, which means that the City could customize the URL of the portal as well as all the UI elements of it. One of the key integrations the City has is with the PerfectMind application, a membership management software that uses cloud-based technology to help cities connect with their communities. The LoginRadius PerfectMind SSO connector is an out-of-the-box solution that provides a seamless single sign-on experience between LoginRadius and the PerfectMind platform by creating contacts on-the-fly during SSO workflow. Whenever any citizen logs into the City’s website, they will be automatically logged into the PerfectMind site. The LoginRadius SSO connector will check if a corresponding contact exists on the PerfectMind site or not. If there is no contact in the PerfectMind application, LoginRadius will create the corresponding contact in the PerfectmInd application and let the customer log in to the PerfectMind application. With this integration, citizens are able to access recreational services to search and register for programs with a single account giving them the best experience while surfing the City’s website. The modern digital landscape demands robust security, which significantly relies on access tokens that securely authenticate users. A token plays a crucial role in enhancing the overall security mechanism of an organization that helps to deliver flawless and secure authentication and authorization on their website or application. For years, businesses have been using token-based authentication that allows users to access resources. These tokens have a minimal lifetime, ensuring that cybercriminals have minimum time to exploit a user’s identity. With token security, users have to re-authenticate themselves for obvious security reasons by offering credentials to sign in if the access token is expired. However, this can be tedious and hampers user experience. To overcome this, the concept of refresh tokens was introduced. A refresh token ensures that a user can regain the access token without providing login credentials. Let’s dig deeper about refresh tokens, their use, and how they interact with JWTs (JSON Web Token). A token can be defined as a digitally encoded signature used to authenticate and authorize a user to access specific resources on a network. A token is always generated in the form of an OTP (One-Time Password), which depicts that it could only be used once and is generated randomly for every transaction. The token-based authentication allows users to verify their unique identity, and in return, they receive a special token that provides access to specific resources for a particular time frame. Apart from this, users can easily access the website or network for which the token is issued and need not enter the credentials again and again until the token expires. Tokens are widely used for regular online transactions for enhancing overall security and accuracy. Since access tokens aren’t valid for an extended period because of security reasons, a refresh token helps re-authenticate a user without the need for login credentials. The primary purpose of a refresh token is to get long-term access to an application on behalf of a particular user. In a nutshell, a refresh token allows any website or application to regrant the access token without bothering the user. Here are its benefits: JWT (JSON Web Token) is used to provide a standard way for two parties to communicate securely. JWT is commonly used for managing authorization. There is an open industry standard called RFC-7519, which defines how JWT should be structured and how to use it to exchange information (called “claims”) in the form of JSON objects. This information can be verified and trusted as it is digitally signed. JWT (JSON Web Token) is a popular method of SSO, which is widely used by B2C applications, and through this system, you can allow your consumers to log in to an application that supports JWT. Before inching towards refresh tokens, one should understand that OAuth 2.0 specifications define both access tokens and refresh tokens. Enterprises can leverage a refresh token in scenarios where the API needs authentication through an access token but users aren’t always available to provide credentials again and again. Hence, to enhance usability and improve user experience, refresh tokens can be used. Also read: Working With Industry Authorization: A Beginner's Guide to OAuth 2.0 Since browser-based web applications cannot start using a refresh token, refresh tokens always require additional security. Whenever a refresh token is being utilized, the security token service quickly issues another access token and a new refresh token. The user can now make API calls through a refresh token. Whenever the overall security token service suspects that any refresh token is being used more than once, it automatically assumes something isn’t right. As a result, the refresh token gets immediately revoked and hence ensures adequate security. RBA (Risk-based Authentication) can be the finest way to enhance the security of a refresh token since it helps to analyze a vulnerability and automatically adds another stringent security layer in the mechanism. RBA works seamlessly with token-based authentication and can help improve overall security in high-risk scenarios where businesses need a stringent mechanism to prevent a security breach. JWTs represent a set of claims as JSON objects encoded in a JWS and JWE structure. This JSON object is called “JWT Claims Set.” The JSON object consists of zero or more name/value pairs (or members), where the names are strings, and the values are arbitrary JSON values. These members are the claims represented by the JWT. Your JWTs can contain any information you want; the user's name, birth date, email, etc. You do this with claims-based authorization. You then just tell your provider to make a JWT with these claims from the claims principle. Authentication is implemented through JWT access tokens along with refresh tokens. The API returns a short-lived token (JWT), which expires in 15 minutes, and in HTTP cookies, the refresh token expires in 7 days. JWT is currently used for accessing secure ways on API, whereas a refresh token generates another new JWT access token when it expires or even before. Refresh tokens can be the ideal way to enhance security and improve user experience since users need not enter login credentials again and again. LoginRadius helps enterprises get maximum benefits in terms of security, scalability, and usability when implementing token-based authentication on web and mobile devices. Businesses can leverage LoginRadius’ authentication and authorization services for a seamless experience that fosters business growth. Schedule a call today! When was the last time you signed up to a website by filling out the entire registration form? Gone are the days where you had to fill out lengthy registration forms, create different usernames and passwords, and remember them every time you tried to login - awesome, right! Consumers demand a smarter experience today. They don't like to create a new ID every time they want to utilize a service. Instead, they are open to leveraging their existing digital identity securely and easily, with the opportunity to reuse it in multiple domains. And as a response to this demand, businesses have come-up with a concept called Bring Your Own Identity (BYOI). The \"Bring your own\" trend started when organizations allowed their employees to bring their device - BYOD. Later, it gained popularity and paved the way for many such concepts like Bring your own apps (BYOA), Bring your own technology (BYOT), Bring your own cloud (BYOC), Bring your own encryption (BYOE), etc. Bring your own identity, or BYOI is also one such trend where consumers bring in their own digital ID, which is either managed by self or by any third-party. Instead of asking consumers to fill in long forms as part of the registration process, you can allow them to choose their existing digital identity. These could be any of their social media accounts such as Facebook, Twitter, Google, or LinkedIn. Moreso, with features like simplified registration (which is both quick and secure), the BYOI trend can address the problems of organizations that are losing consumers. With the pandemic forcing organizations to rethink their digital transformation, BYOI is a key part of securing user identities in 2021. BYOI (Bring Your Own Identity) will unlock the value in digital identities and is going to disrupt traditional methods of access in the future. Many of your consumers have an existing digital identity, and BYOI lets them use an account they already have rather than creating a new one. By allowing your consumers to log in with an existing set of credentials, you make it simple for consumers to sign up for an account with you, increasing your overall conversion rate. Identity Brokering is an approach where organizations/businesses do not require consumers to provide their credentials to authenticate. Instead, an identity broker service acts as a bridge between the Identity and Service Providers and enables the authentication process between the two. If you are the CSO or CIO of your company looking for a platform that acts as an identity broker, the LoginRadius CIAM platform is the perfect solution that can act as a bridge between multiple identity service providers. The possibilities are endless with the LoginRadius platform in how you can set up your login flows to best serve your consumer's needs and meet your business goals. LoginRadius can integrate with any provider, so you can give your consumers the convenience and choice while having an optimized back-end infrastructure to ensure an automated and streamlined experience for your consumers. Do you have a WordPress site? Do you run a business with hundreds or thousands of users? Then, you might want your consumers to seamlessly move between your multiple sites without them having to re-enter their credentials, right?\nAsking them to re-authenticate is a cumbersome process. This is where SSO helps you! Businesses thrive by providing a seamless experience to their consumers. So, yes! Whether you are running an ecommerce business, travel, hospitality, or even blogging, you can only attract consumers to provide them with frictionless experiences. Single Sign-On (SSO) refers to the authentication process that allows your customers to access multiple applications with a single set of login credentials and an active login session. Having SSO for your WordPress sites will boost the experience of the consumer spending time on your site. It is relatively effortless nowadays to build a fancy-looking site that will attract consumers at first.\nBut, for a site to gain traction and make those consumers return to your site will be a challenge.\nFor example, by offering a frictionless experience and having no barriers like complicated registration forms, asking not to sign in repeatedly will make your site stand out over your competitors.\nSSO helps your consumers navigate across your multiple web properties. Once the user is logged in, they don't have repeated demands for sign-ins. The experience is frictionless. Adding SSO to your existing web properties can be a challenge. LoginRadius WordPress Plugin is an out-of-box solution that replaces the WordPress default login form with the LoginRadius JS forms. With minimal time and effort, you can add SSO to your existing sites leveraging LoginRadius WordPress Plugin and gain access to login data via our dashboard. This will help you to boost conversion and also reduce the time to onboard consumers. We have detailed documentation. LoginRadius aims to help developers, web development agencies, and businesses to add SSO in the simplest way possible.\nLoginRadius allows you to store your consumer profiles securely and add our customizable login interfaces into your applications in minutes. By enabling our SSO, you can create a frictionless user experience, thus boosting your conversion rate. We always want to hear from our customers. Like many others in the market, we want developers to install it and offer feedback. This feedback will help us enhance the plugin and make it more user-friendly.The show must go on…
\nIntroduction
\nManaging the Identities
\nEasy Roll-Out
\nPerfectMind Integration
\nWhat is a Token?
\nWhat is a Refresh Token?
\n\n
\nWhat is a JWT (JSON Web Token)?
\nWhen to Use a Refresh Token?
\nBest Practices to Secure Refresh Tokens
\nAuthentication Using JWT Token and Refresh Token
\nConclusion
\nWhat is BYOI
\nThe Big Picture
\nIdentity Brokering
\n Identity broker service facilitates BYOI by implementing industry-standard protocol OAUTH2. OAuth (Open Authentication) 2 is a framework that authorizes and enables applications to obtain limited access to a consumer's accounts on an HTTP service such as Facebook, GitHub, or DigitalOcean.
\nThe LoginRadius Advantage
\nWhat is SSO
\nSSO - For a seamless user experience
\nSSO with LoginRadius
\nIt's Here to Help Developers
\n\n
\nYour Take?
\n