Client Spotlight: IAMaaS for SWICA

We are delighted to announce the successful launch of our latest IAM-as-a-Service project. The project provides a centralised registration and login platform for a range of digital services from SWICA, one of the largest health insurance companies in Switzerland.

What are the capabilities of the new IAM?

The new IAM provides a centralised solution for customer identity and access management (CIAM) for the following SWICA services:

• mySWICA is a comprehensive customer portal that combines various health insurance services for the insured.
• BENECURA is a health app that enables users to proactively manage their health through features such as symptom and preventive check-ups.
• BENEVITA is an app that encourages healthy living habits by supporting regular exercise, healthy nutrition and relaxation.
• Compassana is a digital health ecosystem that connects medical and para-medical service providers, facilitating collaboration between them.
• Consulta is a tool designed to streamline the creation of offers and applications, benefiting both new and existing customers.

The login data of over 400,000 existing users was successfully transferred from the previous system to the new solution.

Secure onboarding and authentication

The IAM solution allows new users to register and provides multiple secure authentication methods. Users have the option to authenticate using FIDO (Fast Identity Online) or mTAN/SMS. These 2FA technologies ensure a high level of security for credentials and a good user experience.

Technical infrastructure and availability

The technical implementation of the project was carried out on a dedicated, highly available PostgreSQL database, which is distributed across two data centres. This ensures smooth operation and a high level of reliability. Three environments have been set up for further developing the platforms, ensuring seamless integration and smooth operation: PROD, TEST and PLAY.

Connection and communication

To ensure the reliable delivery of mTANs to users, a connection to Swisscom's ‘Large Account’ SMS service has been implemented via an SMPP interface. E-mails are sent via the aspectra comm gateway and all outgoing e-mails are DKIM signed. This guarantees the authenticity and integrity of the messages.

Technology expertise from Ergon Informatik

The fine-tuning of the login application was dpne in collaboration with our long-standing technology supplier Ergon Informatik. Thanks to Ergon's expertise, a tailor-made solution was created that meets the highest security and user-friendliness requirements.

A future-proof system for SWICA

With the successful go-live of this IAM project, we have reached another milestone in the provision of secure and efficient online services for SWICA. We are proud to contribute to the digitalisation and security of healthcare services and look forward to continuing our collaboration with SWICA.