#Japan #Tokyo #Mitsui Sumitomo #Authlete #Aioi Nissay

Mitsui Sumitomo and Aioi Nissay Implement OIDC with Authlete

In a significant technological advancement, Authlete, a company based in Tokyo, has successfully partnered with Mitsui Sumitomo Insurance Co. and Aioi Nissay Dowa Insurance Co. to integrate OAuth and OpenID Connect (OIDC) backend services into their customer platforms. This collaborative effort has led to the implementation of OIDC within an impressive timeframe of just six months.

The ability to securely provide customer contract information and facilitate Single Sign-On (SSO) access from applications to contract holders' dedicated websites represents a major leap in user experience and security. This enhancement allows clients to easily verify or modify contract details, report incidents, and claim insurance benefits through dedicated web pages.

Implementation Background and Requirements

Both Mitsui Sumitomo and Aioi Nissay had decided to upgrade their services to enhance security in the digital environment. To ensure secure management and sharing of contract information within applications used by customers, they selected OIDC as their implementation framework. The responsibility for the OIDC implementation fell to MS&AD Systems, a subsidiary of the MS&AD Insurance Group, which already managed the customer information systems.

MS&AD Systems faced the constraint of a six-month development timeline, leading them to choose a Software as a Service (SaaS) approach for OIDC implementation. The decision to use a SaaS product familiarized with additional security measures and continuous support was crucial to ensuring the success of this ambitious project. The selection process involved comparing multiple solutions, including Authlete and other Identity as a Service (IDaaS) platforms like Auth0.

Reasons for Selection and Benefits

Ultimately, Authlete emerged as the preferred choice due to its strong track record in the financial sector, where it has been successfully utilized by various partners, including institutions from insurance, banking, securities, and credit card industries. MS&AD Systems efficiently completed the project within the planned six-month period, effectively utilizing the Authlete API to establish a robust OIDC server that commenced operations steadily from October 2025.

In remarks from the Digital Systems Division of MS&AD Systems, they noted, “Authlete provided prompt support throughout the introduction process. Furthermore, adhering to our policy of utilizing shared resources within the MS&AD Group, we successfully centralized Authlete licensing, enabling us to build our systems more efficiently. Given the high security standards demanded in the financial sector, we anticipate continued support for OIDC specifications to stay ahead of security updates.”

Explore More Use Cases

To discover more about the various applications of these technologies within the companies, you may visit our website, where you will find customer case studies demonstrating the successful deployment of Authlete's solutions in real-world scenarios.

About Authlete

Authlete specializes in streamlining the implementation of OAuth 2.0 and OpenID Connect (OIDC) authorization systems through its innovative web API. Developed by experts involved in international standard specifications, Authlete is already OpenID certified and complies with advanced security protocols, including FAPI and CIBA, as well as the latest standards for OpenID regarding Verification Credentials Issuance. Their solutions have seen extensive adoption across diverse sectors including finance, media, retail, technology, and consulting, catering to a wide range of clients from startups to established enterprises.