Research platform identity
Single sign-on for Genovalia’s applications with Keycloak, OpenID Connect and ORCID, and roles for the internal team and external partners.
Every Genovalia application signs people in through one Keycloak instance. Researchers can use ORCID, the identifier most of them already have, and the applications talk to Keycloak over OpenID Connect (the standard way for an app to hand sign-in off to another service).
I own identity and access for the platform: the Keycloak configuration, kept as code, and the role design that decides what the internal team and each external partner can see and do.