building saas for the enterprise

BUILDING SAAS FOR THE ENTERPRISE

Beau Christensen

Copyright © 2014 Ping Identity Corp. All rights reserved. 1

DEVOPS @PING

Confidential — do not distributeCopyright © 2014 Ping Identity Corp. All rights

reserved. 2


reserved. 3

Security


reserved. 4

Identity on the Perimeter

Embedding Identity into the internet.


reserved. 5

http://www.deviantart.com/art/JJ-Enterprise-Cutaway-511151062





reserved. 6

& Things will get easier.


reserved. 7

Build a Change Process


reserved. 8

Diversify your locations. Use the private cloud and public. Don’t put all your eggs in one basket.


reserved. 9

Store Configuration Data Globally.

Store User Data Regionally.

Do not shard the application!


reserved. 10

You will need to support old, shitty operating systems.


reserved. 11

You NEED automated Security Scans, Secure Software Development Process, and yearly 3rd party audits of your software and infrastructure security.

DDoS WAF -> Firewall -> Identity -> Firewall -> WAF -> OS -> Analytics


reserved. 12

Use active/active failover and the power of the public cloud to avoid a massive BCP or DR plan. It’s far more efficient &you don’t have to maintain moardocuments!


reserved. 13

Public Uptime & Status

+(local!)


reserved. 14

Gigantic, 172 page security questionnaires are a favorite.

Maintain a database of them, and makeit a repeatable process that even a salesguy could do.

WTF


reserved. 15

They want access to you.(just be confident)


reserved. 16

“The Big Game”


reserved. 17

Don’t scale until you have to!


reserved. 18

Befriend your legal people.


reserved. 19


reserved. 20

Worth it.

building saas for the enterprise

Technology

ping identity

ping confidential

identity firewall

infrastructure security

public cloud

automated security scans

page security questionnaires

repeatable process