IDENTITY · ADVENSIS
Platform identity layer
Enterprise sign-in that fits into the directories customers already run.
The Keycloak-based identity layer shared by the Advensis products: federation with LDAP / Active Directory, Entra ID brokering, silent SSO, MFA, and custom login themes.
Key decisions
- Kerberos/SPNEGO for silent SSO — users on a domain machine sign in without a login screen.
- Each service ships its own permissions manifest. Roles and permissions are seeded per tenant from those manifests, not hand-maintained.
- Broker, don't migrate. Customers keep AD or Entra ID as the source of truth.
Keycloak · LDAP / AD · Entra ID · Kerberos/SPNEGO