CUSTOMER STORY

Berklee Orchestrates App Integration,
Adds Services for Alumni Community with OneLogin“I think that’s really the flexibility of the OneLoginplatform, the types of accounts you have, configurable
applications—it’s fairly wide.”Gaël Frouin
INFORMATION SECURITY OFFICER, BERKLEE COLLEGE OF MUSICINDUSTRY
Higher Education

SIZE

Quincy Jones, Trey Parker, John Mayer, Melissa Etheridge—
with alumni like that, Berklee College of Music has reason tobe proud, and to secure their data and identity while offering
alumni access to services that forge an even stronger bondwith the community.

CHALLENGE
Known as the world’s foremost institute for the study of jazz andcontemporary music, Berklee has 55,000 alumni around the world, and6,000 staff, faculty and students at its main campus in Boston, as well as
Valencia, Spain and online.

61,000 users: 6,000 students,
faculty and staff; 55,000 alumni

CLOUD APPS
WebEx, Symplicity, Parchment,
Lynda.com, Google Apps for
Education, Moodle, CloudLock

CHALLENGE
Integrate and improve flow
between multiple apps with SSO
Increase alumni engagementwith improved services
and access
Concern with managinginfrastructure and support
for open source

To foster a better user experience and improve adoption, Berklee Digital
Strategy and Communication department wanted to improve integrationof several key applications, instead of requiring users to log into eachapplication individually. They wanted a contemporary single sign-on(SSO) solution to improve the flow between applications for their faculty,staff and students.
“In addition, we wanted to provide more services to our alumni
community, with an online transcript solution, and providing a single
sign-on solution was one way to do this, while allowing everyone toaccess more services,“ says Gaël Frouin, Information Security Officer atBerklee College of Music.
“The two main drivers were the ability to quickly include logins througha Google directory, because our alumni have Google email accounts, andto enable rapid integration, without requiring them to change all their

SOLUTION
SSO access with contemporary,flexible user interface
Ease of integration, using
SAML and Google
Social login, expanded
alumni services

RESULTS
Strong global user adoption
and familiarity
Flexible identity enables accessby email or username
Additional services strengthen
alumni relationships, community

passwords. We also looked for flexibility in the user experience—oneuser experience with features that would allow them a direct connection
to our internal directory, to change their own password, and allow us tocustomize the interface,” recalls Frouin.
Focusing on three main applications, a team from Digital Strategy &Communications, Information Security and System Administration
defined the technical and user requirements, platform management anddirectory integration with existing services. They consulted with thevarious application owners to ensure standards support.
Initially the team looked at both identity as a service (IDaaS) providers
and open source solutions such as Shibboleth and SimpleSAMLphp,
but chose IDaaS for easier integration with SSO, as well as relieving theburden of infrastructure maintenance. “We knew that many applications
were going to support SAML for SSO, so that protocol became a highpriority for new apps,” states Frouin.

SOLUTION
Berklee conducted comprehensive proof-of-concepts with several IDaaS“OneLogin was fairly easysolutions. “OneLogin was fairly easy to implement. Compared withto implement. Compared

the other solutions, we found the OneLogin user experience and userinterface to be more flexible. And a compelling price was an importantfactor in our choice,” says Frouin.

with the other solutions,
we found the OneLoginuser experience and user

The main applications Berklee initially integrated with SSO include
WebEx for web conferencing, institutional websites, Symplicity career
management resources, Parchment for transcripts for alumni and current
students and Lynda.com corporate learning and training service. And
there are more on the way.
“Using Google as a directory for our alumni was important, with OneLoginand Active Directory for our internal users - faculty and students. We
had most of our alumni in the Google directory, in their own domain, andwe wanted to be able to integrate them in various applications reallyquickly. So we wanted to leverage the information we had in Google, andOneLogin enabled us to do that. We now have moved away from Google
as a directory and migrated our alumni to local accounts, allowing us
to integrate the application through SAML authentication and performalumni provisioning through OneLogin, “ observes Frouin.
“To correlate login attempts from various locations, and send alerts incase of suspicious activity, Berklee leverages the integration between
OneLogin and CloudLock to protect and manage our cloud infrastructure.
This setup allows us to identify suspicious activity and sensitive data
exposure, and remediate against them,” adds Frouin.

O N E LO G I N . C O M

interface to be more flexible.”

RESULTS
Berklee is reaping the benefits of selecting OneLogin in four main areas,according to Frouin—user adoption, flexibility, ease of integration, andalumni community services:1. User adoption: “We are happy with the service, globally it’s working wellfor us, with good use and adoption. The main thing that has changed is that
we have the same login everywhere and people are all getting familiar withthis login for their apps.”
2. Flexibility for IT and users: “I think that’s really the flexibility of“Alumni only had an email

the platform, the type of accounts you could have, the application isbefore. Through OneLogin,

configurable—it’s fairly wide. The way we configure OneLogin, internal users

we gave them access tocan login with either their username or their email, which alleviates someissues in certain applications.”
3. Ease of integration: “The integration has been fairly easy, both withinternal users and the rollout of new services to alumni.”

additional applications—thetranscripts, our main website,a notification center, andcareer manager—helping

4. Alumni community services: “Alumni only had an email before. Throughstrengthen their ties to theOneLogin, we gave them access to additional applications—the transcripts,Berklee community.”

our main website, a notification center, and career manager—helping
strengthen their ties to the Berklee community.”

About OneLogin, Inc
OneLogin brings speed and integrity to the modern enterprise with anaward-winning SSO and identity management platform. Our portfolioof solutions secure connections across all users, all devices, and every
application, helping enterprises drive new levels of business integrity
and operational velocity across their entire app portfolios. The choicefor innovators of all sizes such as Condé Nast, Pinterest and Steelcase,
OneLogin manages and secures millions of identities around the globe.

O N E LO G I N . C O M