The challenge
D&B provides an API that lets partners and customers query company data. It needed stronger API protection without adding friction for partners, an intelligent authentication framework, a low-downtime move to serverless AWS, and a standard approach to multi-factor authentication across the enterprise.
What Zephon did
- API security: API management, federation services, and monitoring to prevent unauthorized access.
- Adaptive authentication: risk-based authentication for partners using OneLogin and Azure AD OIDC.
- Security monitoring: AWS ELK Stack for real-time security analytics and telemetry.
- Serverless migration: moved workloads to AWS Lambda with minimal downtime.
- MFA strategy: an enterprise-wide YubiKey MFA framework and rollout plan aligned with NIST 800-63.
- IAM roadmap: a forward-looking identity and access management strategy.
Results
- Partner and customer access to the data API governed through API management and federation, with security telemetry in AWS ELK.
- Risk-based authentication for partners through OneLogin and Azure AD OIDC.
- Workloads running on a serverless AWS Lambda model.
- YubiKey MFA standardized across the enterprise under a NIST 800-63-aligned framework, with an IAM roadmap for the next phase.