Research platform identity
Single sign-on for Genovalia's applications, with Keycloak, OpenID Connect and ORCID so researchers log in with the identifier they already have.
Every Genovalia application signs people in through one Keycloak instance. Researchers can use ORCID, the identifier most of them already have, and the apps talk to Keycloak over OpenID Connect.
I maintain its configuration as code and run it on OpenShift, alongside the applications that depend on it.