EmpowerID components are deployed as microservices into Docker Containers that reside on Azure Kubernetes Service. Load balancers are used to distribute load among the containers across two availability zones. The database, also called Identity Warehouse, is replicated via 3 active Geo-Replication. To enable communication between your on-premise systems and EmpowerID SaaS tenant, a lightweight Windows application, the EmpowerID Cloud Gateway, is used.
A diagram of the architecture is provided below for reference, along with audio describing it.