Building Saas for the Enterprise
Download as PPTX, PDF1 like559 views
The document discusses various tips and strategies for building software-as-a-service (SaaS) applications for enterprise customers. Some of the key points covered include the importance of security scans, secure development processes and third-party audits; using active-active failover and public clouds for availability and disaster recovery; storing configuration data globally but user data regionally; and developing automated processes for completing lengthy security questionnaires.
Building Saas for the Enterprise
- 1. BUILDING SAAS FOR THE ENTERPRISE Beau Christensen Copyright © 2014 Ping Identity Corp. All rights reserved. 1
- 2. DEVOPS @PING Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 2
- 3. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 3 Security
- 4. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 4 Identity on the Perimeter Embedding Identity into the internet.
- 5. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 5 http://www.deviantart.com/art/JJ-Enterprise-Cutaway- 511151062
- 6. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 6 & Things will get easier.
- 7. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 7 Build a Change Process
- 8. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 8 Diversify your locations. Use the private cloud and public. Don’t put all your eggs in one basket.
- 9. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 9 Store Configuration Data Globally. Store User Data Regionally. Do not shard the application!
- 10. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 10 You will need to support old, shitty operating systems.
- 11. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 11 You NEED automated Security Scans, Secure Software Development Process, and yearly 3rd party audits of your software and infrastructure security. DDoS WAF -> Firewall -> Identity -> Firewall -> WAF -> OS -> Analytics
- 12. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 12 Use active/active failover and the power of the public cloud to avoid a massive BCP or DR plan. It’s far more efficient & you don’t have to maintain moar documents!
- 13. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 13 Public Uptime & Status + (local!)
- 14. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 14 Gigantic, 172 page security questionnaires are a favorite. Maintain a database of them, and make it a repeatable process that even a sales guy could do. WTF
- 15. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 15 They want access to you. (just be confident)
- 16. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 16 “The Big Game”
- 17. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 17 Don’t scale until you have to!
- 18. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 18 Befriend your legal people.
- 19. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 19
- 20. Confidential — do not distribute Copyright © 2014 Ping Identity Corp. All rights reserved. 20 Worth it.