Secure SSO + SCIM for Epic Games

Scenario

Epic Games, a leading global interactive entertainment company, wanted an innovative way to improve employee identification and make it easier for its employees to access Epic Games’ employee-only store on Shopify. miniOrange assisted Epic Games, in improving their employee experience on their Epic Games Shopify Store by making the login process more simple and safe by developing a tailored solution that met their specific needs. Their goal was to ensure seamless access and user management using their existing Okta infrastructure. The solution provided by miniOrange integrated Single Sign-On (SSO) and user synchronization between Okta and Shopify, meeting all their needs efficiently.

About Epic Games

Epic Games, founded by Tim Sweeney in 1991 under Potomac Computer Systems, is a leading American video game and software development company. It is renowned for creating the Unreal Engine, a versatile game development platform numerous developers use worldwide. Additionally, Epic Games operates the Epic Games Store, a digital distribution platform that rivals other services like Steam. Beyond gaming, Epic Games has made significant strides in technological advancements, particularly in 3D graphics and game development tools. The Unreal Engine is extensively used across various industries, including film, architecture, and automotive design, for its superior real-time rendering capabilities.

Challenges

Epic Games needed an exclusive online store for employees, ensuring that only authorized personnel could access it. The main challenges were:

• Secure Access: Epic Games faced certain issues with its conventional login process, which required its employees to navigate through several steps, such as manually entering usernames and passwords. This led to delays in access to the online store and hindered the overall user experience.
• Employee-Only Store: They wanted to create an Employee-Only Shopify store where employees can log in using their corporate Okta credentials. They wanted to ensure that no external users could access the store, making it exclusively available to their employees.
• User Management: On similar lines, they were dealing with the complexity of managing user data and keeping it consistent across all its different platforms. So they wanted to automate the synchronization of user data between Okta, Shopify, and other platforms.
• Seamless Experience: Managing multiple application logins and ensuring a consistent and secure login experience across different devices was becoming challenging with the increasing number of employees. So they wanted to provide a smooth and secure login experience without compromising on security.

miniOrange Solution

To tackle these challenges, miniOrange proposed a few solutions. Let’s look into them in detail.

1. Single Sign-On (SSO) for the Login Process

To help employees log in to multiple systems easily and resolve security issues, we implemented the Single Sign-On (SSO) solution.

Using miniOrange's Single Sign-On (SSO) application, Epic Games employees were able to log in to their respective Shopify accounts using their pre-existing corporate credentials, eliminating the need to use separate usernames or passwords. This made it super easy for their employees to log in with Okta with a hassle-free solution reducing manual efforts and time consumption. Also using our "Sign Up Restriction" feature we made the store exclusive to their employees so that only they can access the store. If an external user tries to access the store, they will be redirected to the Access Denied Page.

2. SCIM for User Management

To simplify the management of user data, we proposed the miniOrange SCIM Solution to Epic Games.

The solution helped Epic Games automate the sync of user profiles between Okta and Shopify i.e. automate the process of creating, updating, and deleting users from the Identity Provider (Okta) to the Shopify Store. This ensures that any changes in Okta (new hires, role changes, terminations) are reflected in real-time in the Shopify store. Overall, the miniOrange SCIM solution assisted Epic Games improve its efficiency, productivity, and accuracy.

Result

The implementation of the miniOrange applications on the Shopify store resulted in significant improvements in the end-user experience and met the requirements of Epic Games in the following ways:

• Removed multiple identities and passwords and simplified the login process with the existing corporate credentials.
• Created an Employee-only store that can only be accessed by the Epic Games employees.
• With enhanced authentication and authorization, overall application security improved fourfold.
• Managing the increasing number of employees became hassle-free with the SCIM solution.

About Us

miniOrange is a leading cybersecurity organization that offers a robust and secure Identity and Access Management (IAM) solution that empowers organizations to achieve industry-leading security, enabling access anywhere, everywhere.

Our expertise includes security solutions for popular CMS and project management platforms like Atlassian, WordPress, Joomla, Drupal, and Magento. Similar security solutions are available for platforms like Atlassian, WordPress, Joomla, Drupal, and Magento.

Our products empower the Shopify stores (Shopify Plus and Shopify Non-Plus) with features like Single Sign-On (SSO), Restrict Store Content, Web3 Authentication, NFT Token Gating, NFT Minting, Multi-factor Authentication, User Sync, Course Sync, Gift Card, Subscription, Order/SMS Notification, Inventory Management, and many more. For more information, or any queries you may have, contact us at shopifysupport@xecurify.com and we will get in touch with you in no time.