Apexon partnered with this automotive SAAS provider to modernize its identity and access management system across its multi-tenant Dealer Experience Platform (DXP) through two distinct projects. In Phase 1, Apexon developed a centralized admin application, enabling their staff to securely access multiple dealership servers using OKTA single sign-on (SSO), eliminating login conflicts. In Phase 2, Apexon migrated all legacy In-Store application users to an Auth0-based login system, implementing unified authentication and role-based access control (RBAC). The solution reduced credential management effort by 99% for staff users, improved the user onboarding experience and cut third-party identity provider (IDP) setup time from weeks to 2 days, reinforcing client’s commitment to a secure, streamlined car-buying experience.
This client provides a Dealer Experience Platform (DXP), bridging digital retailing and in-store operations for automotive dealerships. The platform integrates digital retail tools, dealership desking, F&I menu management, and digital signing to ensure a seamless car-buying experience, where online pricing and deal structures align with in-store transactions. Serving hundreds of dealerships, the platform integrates with CRM and inventory systems, offering real-time deal visibility and dedicated client success support to optimize sales performance across client rooftops. With a multi-tenant SaaS architecture, they manage distinct instances for each dealership, requiring robust identity management to handle staff and dealer users securely. Their commitment to innovation drives its need for scalable, secure, and user-friendly authentication solutions to support growing dealership networks and enhance operational efficiency.
Overcoming Fragmented Identity Management and Security Risks
This client faced significant challenges in managing user identities across its multi-tenant platform, which hindered operational efficiency and posed security risks. Multiple server environments under a single domain caused browser limitations, as browsers were unable to store separate credentials for staff users with the same email across different servers, leading to login conflicts, poor user experiences, and increased security risks from manual password management. Additionally, decentralized user management in the legacy in-store application increased onboarding complexity and security vulnerabilities, necessitating a centralized, secure authentication system.
Key Challenges:
Multiple servers under a shared domain led to credential sprawl and caused browser issues in storing credentials, resulting in login conflicts and a poor user experience for their internal staff users.
Local user management for each dealer instance required redundant onboarding, which increased operational overhead and posed security risks such as phishing vulnerabilities, ultimately resulting in a lack of auditability.
Migrating dealer users and permissions from decentralized databases to a unified Auth0 platform was challenging, especially with role-based access transitions.
Existing direct permission mappings needed restructuring into custom roles without disrupting operations.
Integrating external dealer identity providers (e.g., Google, Azure) with the platform required secure, scalable solutions.
Deploying a Centralized Identity Management Platform with OKTA and Auth0
Apexon implemented a comprehensive identity management solution using OKTA and Auth0, delivering a centralized admin application and unified authentication framework for this client. Through a structured three-phase approach, Apexon migrated legacy user data, enabled secure SSO for staff and dealers, and integrated third-party IDPs, transforming access control and user experience across the multi-tenant platform.
Key Solution Components:
- Developed a unified portal for client’s staff to access all dealership servers with OKTA credentials, eliminating password conflicts.
- Incorporated secure login for internal staff using their corporate credentials via OKTA for in-store application, streamlining access across multiple environments.
- Seamlessly transitioned dealer user identities and permissions to Auth0, ensuring centralized management and scalability, while enforcing MFA, aligning with Zero Trust principles, enabling centralized audit logging, and ensuring encryption of all identity transactions.
- Redesigned permissions into custom roles, enhancing maintainability and security.
- Integrated external dealer identity systems (e.g., Google, Azure) via Auth0’s OIDC, enabling secure SSO without altering dealer processes.
Apexon’s solution was deployed with rigorous testing, user training, and compliance validation to ensure seamless integration, operational continuity, and alignment with client’s security and scalability goals.
Delivering Measurable Efficiency, Security, and User Impact
Apexon’s identity management solution transformed client’s platform, delivering significant improvements in user experience, operational efficiency, and system security.
- 99% Reduction in Credential Management Effort: Centralized admin portal eliminated manual password management, enabling instant access to 100+ dealerships.
- Over 90% User Satisfaction: Client’s internal staff reported reduced login issues, boosting adoption and productivity.
- 100% Role-Based Access Control: Enforced secure, auditable permissions, reducing unauthorized access risks.
- Robust Data Protection: OKTA and Auth0 integration minimized security vulnerabilities, enhancing platform integrity.
- 40% Increased System Resilience: Reduced authentication-related incidents, ensuring stable operations.
- Third-Party IDP Setup in 2 Days: Reduced setup time from weeks to days, improving partner satisfaction.
- Scalable Architecture: Enabled seamless scaling for new dealerships without re-architecting security layers.
- Operational Agility: Centralized access and automated onboarding streamlined workflows, boosting efficiency.
- Regulatory Compliance: Adhered to security standards with auditable, role-based access controls.
- Client Satisfaction: Client’s director praised Apexon’s solution for its scalability, security, and transformative impact on user experience.
By addressing critical identity management challenges, Apexon empowered them to deliver a secure, efficient, and user-friendly platform, reinforcing its leadership in automotive SaaS solutions.
Conclusion
Apexon’s partnership with this client transformed identity and access management through a centralized Okta and Auth0-powered solution. By enforcing MFA, strengthening security controls, consolidating monitoring, and encrypting identity transactions, the platform eliminated redundant onboarding, reduced phishing exposure, and improved auditability. Along with achieving a 99% reduction in credential management effort for internal staff users, this transformation addressed immediate operational challenges while positioning the client for long-term success in delivering seamless and secure car-buying experiences.
