OneConnect is hosted in the Microsoft Azure cloud, ensuring accessibility from anywhere with an internet connection. This cloud-based architecture offers flexibility and scalability. The platform’s primary function is to connect various systems, eliminating the need for manual data entry. This integration capability is essential for enhancing data accuracy and reducing the risk of errors.

OneConnect comes with a library of pre-built integration solutions, which simplifies the resolution of common issues when working with multiple applications. Beyond pre-built integrations, OneConnect provides flexibility for developing customer-specific use cases. Users can leverage the platform’s core capabilities to create integrations tailored to their unique business needs.

OneConnect offers an admin site that serves as a centralized hub for managing integrations. It allows users to add, configure, and oversee integrations. This simplifies the set-up and ongoing management of integrations.  Updates to integrations are facilitated through the admin site’s user interface.

OneConnect offers the flexibility to move data in both directions and unidirectionally, depending on the specific requirements of the business. This bidirectional data flow ensures that information is synchronized as needed. Data synchronization can occur based on various triggers, including time-based schedules, on-demand actions (e.g., button clicks), or in near real-time, triggered by specific events. This adaptability ensures that data remains up-to-date and relevant to the business’s operations.

OneConnect is a dynamic cloud-based platform that offers a comprehensive solution for integrating data across various systems. Its flexibility, user-friendly admin site, and various data synchronization options make it an asset for businesses looking to optimize their data management processes.

Microsoft Azure Hosting as multi-Tenant SaaS

OneConnect is hosted in Microsoft Azure as a multi-tenant Software as a Service (SaaS) platform. This cloud-based approach ensures accessibility, scalability, and reliability for users.

Connectivity to Cloud and On-Premises Applications

OneConnect is designed to connect seamlessly with both cloud-based and on-premises applications, providing flexibility and compatibility across diverse technology environments.

Office 365 Authentication

The platform leverages Office 365 authentication for user access, enhancing security through a widely recognized and robust authentication systems.

Minimal Data Storage

OneConnect adopts a minimalistic data storage approach. It does not store customer data such as project names or user information. Only unique Item IDs (GUIDs) and timestamps are retained for performance reasons.

Data Encryption on Transit

All data transmitted through OneConnect is encrypted on transit using SSL (Secure Sockets Layer) and DigiCert certificates. This encryption ensures the confidentiality and integrity of the data during transmission.

Credential Encryption with Azure Key Vault

Usernames and passwords, particularly service credentials for accessing integrated systems, are encrypted using Azure Key Vault. This adds an extra layer of security to sensitive information.

API Keys and Token-Based Methods

OneConnect employs API keys and token-based methods instead of relying solely on usernames and passwords where supported. This enhances security and reduces the risk associated with traditional authentication methods.

Secure Connection to On-Premises Applications

Azure internet relays provide a secure means of connecting to on-premises applications without the need to open ports on firewalls. This ensures a secure communication channel between OneConnect and On-Premises systems. For more information on how to set up Relays: Relay Installation 

Azure Certificates and Security Standards

Azure, as the hosting platform, holds various certifications including, SOC II Type II. It is recognized for its high level of security, and the platform adheres to industry standards and best practices.

Security Testing and Compliance

For security testing, OneConnect undergoes dynamic code analysis using Qualys for web application scanning and network pen testing. The Security Code Scan extension for Visual Studio is employed for static code analysis. The platform and its employees adhere to Open Web Application Security Project (OWASP) Standards. 

Additional Resources

For more detailed information on Azure security, certifications, and SOC reports, users can refer to the provided Microsoft Trust Center Links:

• https://www.microsoft.com/en-us/trustcenter/security/azure-security 
• https://www.microsoft.com/en-us/trustcenter/compliance/soc 
• https://learn.microsoft.com/en-us/azure/azure-relay/