Overview

25+ enterprise applications moved from on-premises infrastructure to AWS. They were redesigned as they moved, rather than copied as they were. Customer and employee identity used Duende IdentityServer for borrower portals over OIDC/OAuth 2.0/JWT with MFA, and Ping Identity federated with Azure AD / Entra ID for internal SSO. Operational cost came down by about 25%, and scaling became something the team could plan, rather than something that happened during an incident.