{"id":37205,"date":"2021-02-04T12:11:54","date_gmt":"2021-02-04T12:11:54","guid":{"rendered":"https:\/\/www.intelligentcio.com\/africa\/?p=37205"},"modified":"2021-02-18T09:18:31","modified_gmt":"2021-02-18T09:18:31","slug":"ninety-one-chooses-auth0-as-foundation-for-digital-transformation","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/africa\/2021\/02\/04\/ninety-one-chooses-auth0-as-foundation-for-digital-transformation\/","title":{"rendered":"Ninety One chooses Auth0 as foundation for Digital Transformation"},"content":{"rendered":"\n

Ninety One is a South Africa-based independent, active investment manager dedicated to delivering compelling outcomes for its clients, managing more than \u00a3119 billion (2.6 trillion rand) in assets. Recently it implemented Customer Identity and Access Management (CIAM) infrastructure, including Single Sign On, Multi-factor Authentication (MFA). Scott Carr, IT Platforms Manager, Ninety One, tells us why it was important for the company to implement this project.<\/em><\/strong><\/p>\n\n\n\n

Established in South Africa in 1991, as Investec Asset Management, Ninety One started offering domestic investments in an emerging market. In 2020, almost three decades of experience organic growth, the firm demerged from Investec Group and became Ninety One. Today, the firm offers distinctive active strategies across equities, fixed income, multi-asset and alternatives to institutions, advisors and individual investors around the world.<\/p>\n\n\n\n

Recently, Ninety One teamed up with Auth0, the identity platform for application teams, to deploy the vendor\u2019s solution to authenticate retail fund investors in South Africa.<\/p>\n\n\n\n

Ninety One needed to replace its on-premises identity solution with Auth0 as part of a broader Digital Transformation strategy to provide customers with a seamless login experience across its investment products and portfolio.<\/p>\n\n\n\n

Following the demerger and listing, Ninety One required its own Customer Identity and Access Management (CIAM) infrastructure, including single sign on, multi-factor authentication (MFA) and self-service password reset features. Ninety One\u2019s own development team and a local transfer agency and administrative outsourcing partner, Silica, recommended Auth0 for ease of integration and the ability to host in the cloud while migrating users gradually from the previous on-premises system.<\/p>\n\n\n\n

\u201cThe move to Auth0 is indicative of our journey in other parts of the organisation,\u201d said Scott Carr, IT Platforms Manager, Ninety One. \u201cWe have embraced Auth0 as essential for our success as a new brand because they enable us to provide the calibre of safe and convenient digital experiences our financial services clients demand.\u201d<\/p>\n\n\n\n

According to research firm IDC, IT security spending in the Middle East, Turkey, and Africa (META) will cross US$3.4 billion in 2023, driven by a focus on digital identities and shifts to the cloud.<\/p>\n\n\n\n

\u201cDigital Transformation shouldn\u2019t be underestimated, but it doesn\u2019t have to be feared either,\u201d said Steven Rees-Pullman, Senior Vice President International, Auth0. \u201cNinety One is looking to the cloud and replacing legacy systems with building blocks like Auth0 to be more adaptable and resilient while delivering great experiences for their clients. We\u2019re pleased to help power their journey.\u201d<\/p>\n\n\n\n

Intelligent CIO Africa <\/em>spoke Carr to find out more about the Auth0 implementation and what the deployment of the Customer Identity and Access Management (CIAM) infrastructure means for Ninety One\u2019s Digital Transformation journey.<\/p>\n\n\n\n

Talk us through Ninety One\u2019s IT infrastructure and why it was important to implement Auth0\u2019s identity platform solution.<\/strong><\/p>\n\n\n\n

Ninety One was formerly part of the Investec Group and although we functioned as an independent entity, we shared a number of core IT systems with the group, such as payroll, general ledger and specifically their customer identity and access management (CIAM) solution, which was used to control access to the Ninety One Digital Investment Platform. Most systems were on-premise and leveraged a shared network infrastructure. As a consequence of last year\u2019s demerger we needed to procure our own versions of the shared systems. With respect to CIAM we needed a solution that offered all the existing security features but also allowed us to scale and enhance the security and align with a broader strategic move towards cloud services.<\/p>\n\n\n\n

What were the main challenges that Ninety One faced prior to this project implementation with Auth0?<\/strong><\/p>\n\n\n\n

Since we did not \u2018own\u2019 the old solution, we were constrained to the protocols of the group. (For example password resets could only be done telephonically). In addition, the communications layer between the group\u2019s on-premise CIAM and the on-premise transactional website (hosted by an outsource partner) was highly sensitive to network and firewall changes resulting in downtime entirely beyond our control. Lastly, the solution was very expensive relative to the requirement it needed to serve.<\/p>\n\n\n\n

Having looked around for suitable customer identity and access management (CIAM) infrastructure<\/strong> <\/strong>technology currently in the market, how did you settle for Auth0?<\/strong><\/p>\n\n\n\n

As part of an RFP process, we invited several participants, including the incumbent solution. All proposals were scored across various categories \u2013 technical capability, security, implementation practice, cost etc as well as engagements with relevant representatives from each participant. Auth0 was a clear front-runner in most of the categories and the interactions with the individuals there gave us confidence about the quality of the product and the prospect of establishing a strong relationship.<\/p>\n\n\n\n

Paint the picture of the size of operation Ninety One runs for retail fund investors in South Africa?<\/strong><\/p>\n\n\n\n

Our investment platform administers assets on behalf of roughly 150,000 retail investors, collectively holding nearly 200 billion rands (US$13 billion) in assets. Ninety One has 200 people supporting this business from sales to servicing, operations and IT.<\/p>\n\n\n\n

Who led the business case process for Ninety One to implement Auth0 solutions?<\/strong><\/p>\n\n\n\n

Our business analyst, Digital Investment Platform IT, Tom Jackson led the business case process.<\/p>\n\n\n\n

How long did the project take to implement and was the project implemented using in-house expertise or you worked with an Auth0 certified solution provider partner?<\/strong><\/p>\n\n\n\n

The Auth0 implementation was aligned with a broader strategic move to create a cloud-first, scalable platform for the future. From purchase to turning off the old CIAM solution was nine months comprising: three months went to design and planning, three months building, testing and deploying, and three months migrating existing users to the new platform.<\/p>\n\n\n\n

What would you cite as challenges your IT team encountered during the implementation of Auth0 solutions?<\/strong><\/p>\n\n\n\n

Integrating to an enterprise cloud offering, mainly through remote collaboration was a change to previous on-premise integrations with physical consultant support. One of the primary technical challenges was running the old and new solutions in parallel and having both of these control access to the legacy on-premise and the newly-built cloud website.<\/p>\n\n\n\n

Designing a user journey that allowed migration of existing users with the minimum of friction but still meeting the timelines was extremely challenging. That said, an unforeseen challenge arose from the decision to move to email address as the username. Previously this had been a newly-generated customer number. Hence users who had multiple logins experienced issues when trying to re-use their email address for secondary or tertiary accounts.<\/p>\n\n\n\n

What has improved following the Auth0 deployment and how has that impacted the overall business at Ninety One?<\/strong><\/p>\n\n\n\n

MFA now protects majority of logins, not used before. With automated registration \u2013 most new registrations are completed without manual intervention, previously all registration was serviced through consultants.<\/p>\n\n\n\n

Automated password reset, previously had to be reset telephonically.<\/p>\n\n\n\n

Did you have to train employees following this Auth0 deployment?<\/strong><\/p>\n\n\n\n

As a consequence of moving away from the on-premise CIAM solution, we were starting with a clean slate and some training was necessary. Two to three developers have skilled up on the Auth0 implementation and in addition to this we have a servicing team of seven to eight who have been trained on the user management portal.<\/p>\n\n\n\n

What is next following the implementation of Auth0\u2019s identity platform solution?<\/strong><\/p>\n\n\n\n

Several of the features we are looking at next are: Adaptive MFA, using Auth0 to authenticate to our API service layer and implementing Guardian (or other apps) for MFA.<\/p>\n","protected":false},"excerpt":{"rendered":"

Ninety One is a South Africa-based independent, active investment manager dedicated to delivering compelling outcomes for its clients, managing more than \u00a3119 billion (2.6 trillion rand) in assets. Recently it implemented Customer Identity and Access Management (CIAM) infrastructure, including Single Sign On, Multi-factor Authentication (MFA). Scott Carr, IT Platforms Manager, Ninety One, tells us why […]<\/p>\n","protected":false},"author":18,"featured_media":37474,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[565,34,338,7383,5,396,36,9059,13,262],"tags":[13771,13773,389,13772,1319,13770],"class_list":["post-37205","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-banking-finance","category-case-studies","category-case-study-newsletter","category-digital-transformation","category-enterprise-security","category-industry-verticals","category-intelligent-technology","category-south-africa","category-top-stories","category-used","tag-auth0","tag-customer-identity-and-access-management","tag-digital-transformation","tag-investec-asset-management","tag-multi-factor-authentication","tag-ninety-one"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/37205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/users\/18"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/comments?post=37205"}],"version-history":[{"count":3,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/37205\/revisions"}],"predecessor-version":[{"id":37476,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/37205\/revisions\/37476"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media\/37474"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media?parent=37205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/categories?post=37205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/tags?post=37205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}