Case study: iDAKTO develops its digital identity solutions with Infomaniak’s Public Cloud

iDAKTO’s software enables millions of people to prove their identity online with the same legal value as a passport or physical ID card. These technologies are currently deployed in projects such as France Identité, Mon Identité Numérique in Morocco and the national enrolment system of the Central Bank of Egypt. This case study shows how iDAKTO deployed Infomaniak’s public cloud to develop its services.

Infrastructure designed for critical environments

To power its sovereign digital identity solutions, iDAKTO has designed a complete software platform called iDCluster. This infrastructure orchestrates all stages of the digital identity life cycle. This includes “enrolment” (the initial step in verifying an individual’s identity), creating digital wallets, strong authentication to access sensitive services and managing access rights. Each component must meet very stringent standards with regard to security, confidentiality and regulatory compliance (GDPR, eIDAS 2.0).

The need for iDAKTO was clear: to secure its own technological sovereignty as well as that of its customers. It was crucial to be able to work on a platform enabling states to master and protect the key technologies needed to operate their sovereign digital identity system.

The environment had to integrate natively into internal DevSecOps workflows, without blocking technical dependencies. The security and reliability of developments had to be guaranteed in order to meet the quality requirements imposed by the institutional partners. The infrastructure had to remain accessible and responsive at all times, allowing teams to develop, test and deliver without interruption.

What needed to be done

iDAKTO had strict constraints when creating its infrastructure:

• Ensure data sovereignty within a clear legal framework and in line with the governmental projects of iDAKTO partners.
• Avoid technology locks and proprietary overlays that limit autonomy and flexibility.
• Enable seamless integration with existing DevOps tools (IaC, CI / CD, monitoring).
• Optimise the cost of the infrastructure to ensure the right balance between performance, budget control and technical requirements.
• Combine high availability and stability by maintaining development environments that are always accessible, with performance close to production, while meeting delivery deadlines.
• Ensure the security of the software forge to detect regressions (anomalies) and validate code changes with complete confidence.

Why Infomaniak?

iDAKTO evaluated several cloud providers. Infomaniak established itself as a suitable solution to meet its criteria. According to Benjamin André, Lead Site Reliability Engineer at iDAKTO, this decision was based on three key factors:

Direct compatibility with existing development chain:

We were looking for a competitive platform that could run our CI / CD workflows automatically and reliably.
Infomaniak offers an environment that integrates seamlessly with our development chain.

Full control of the deployment environment:

With Infomaniak, we were able to deploy an IaaS environment close to customer platforms while maintaining control over each element, without unnecessary overlays or technical blockages. That’s what allowed us to integrate the cloud into our existing pipeline.

Operational simplicity in comparison to competing sovereign clouds:

We preferred a solution that did not require the addition of services or intermediate components, in order to limit the complexity of the chain and external dependencies. Among the options tested, the Infomaniak platform stood out for its great simplicity of implementation, particularly in integrating a Kubernetes cluster into our CI / CD development pipelines.

Infomaniak enabled us to implement a sovereign, interoperable cloud solution without compromising on data protection or the high technical requirements of our business.

Implementation in Infomaniak’s Public Cloud

Thanks to the Public Cloud documentation and its management interface, it was easy to get started. The team integrated the platform into their DevOps workflow in full alignment with their sovereignty requirements.

1. Deployment of sovereign environments in Infomaniak’s Public Cloud
iDAKTO’s technology infrastructure is based on several dedicated environments, designed to provide efficient support in the construction of its platform. Infomaniak’s sovereign Public Cloud makes it possible to host some of these environments, such as development, qualification and acceptance environments.
In this context, the team defines the network architecture, implements security rules (firewalls) and assigns public IP addresses to services requiring external access.

2. Creating an open source infrastructure
iDAKTO has built its infrastructure around an IaaS model based exclusively on open source solutions. OpenStack forms the basis of this infrastructure: the solution provides fine management of resources, networks and security components. The team relies on Kubernetes to manage container orchestration, ensuring portability and scalability. HAProxy is used as a load balancer to handle application routing and PostgreSQL serves as the main relational database. To ease the operational burden and improve scalability, the team is preparing for the phased introduction of managed services for Kubernetes and PostgreSQL.

3. Automation of deployments (Infrastructure As Code)
iDAKTO’s infrastructure is entirely code driven. Each brick deployed is therefore based on “Infrastructure As Code” tools such as Terraform (or its OpenTofu version), Ansible and Helm. This approach makes it possible to version changes, document all operations, clone environments and automate deployments. This facilitates the rapid adaptation of the infrastructure to business or technological changes, while allowing accurate tracking of who has changed what, when and why within the infrastructure.

The results

The Public Cloud provides iDAKTO with a fully controlled infrastructure capable of being scaled freely and being integrated into a government cloud without depending on proprietary technologies:

Sovereignty and flexibility guaranteed:
the hardware and software infrastructure, 100% European, guarantees compatibility with a large software ecosystem and offers full control over security, sovereignty and architectural evolution, both for iDAKTO and its customers.

Infrastructure optimised for the pace of development: the infrastructure deployed in the public cloud guarantees high availability of environments with performance identical to that of production on customers’ premises.

Infrastructure costs under control: the iDAKTO team keeps control over resources and their allocation to optimise the use of its infrastructure. This direct control makes it possible to contain costs while guaranteeing a robust technical environment that meets its sovereignty requirements.

More

Discover iDAKTO
Discover Infomaniak’s Public Cloud
Discover the managed Kubernetes services
Discover how Infomaniak’s sovereign cloud works