IAM/SSO Onboard is the enterprise-scale Single Sign-On, registration, authentication and authorization platform I designed for ?EPS (the Czech electricity transmission system operator), built on Keycloak with OAuth2 and OIDC.
I designed the external-user registration and onboarding flow into a highly secured Keycloak realm, and significantly hardened the authorization model beyond Keycloak's default setup ? closing governance gaps that would otherwise leave external-user access under-controlled in a regulated, critical-infrastructure environment.
Stack: Keycloak, OAuth2, OIDC, Java, running on Openshift with GitLab CI, Kubernetes, Docker, and full observability (Prometheus/Grafana, Dynatrace/Instana, ELK).
IAM/SSO Onboard is the enterprise-scale Single Sign-On, registration, authentication and authorization platform I designed for ?EPS (the Czech electricity transmission system operator), built on Keycloak with OAuth2 and OIDC.
I designed the external-user registration and onboarding flow into a highly secured Keycloak realm, and significantly hardened the authorization model beyond Keycloak's default setup ? closing governance gaps that would otherwise leave external-user access under-controlled in a regulated, critical-infrastructure environment.
Stack: Keycloak, OAuth2, OIDC, Java, running on Openshift with GitLab CI, Kubernetes, Docker, and full observability (Prometheus/Grafana, Dynatrace/Instana, ELK).