⌘K
IAM & SSO
Workstream 3 — unified Keycloak realm, SAML/OIDC federation, RBAC, SCIM provisioning across the merged platform.
Total Users
21,160
Migrated Users
18,450
+812
Active Tenants
42
SSO Success Rate
99.6%
Migration progress
Internal Users (Company A)1,820 / 1,840 · 99%
Internal Users (Company B)612 / 720 · 85%
Customer Users15,240 / 18,900 · 81%
Admin Users410 / 420 · 98%
Service Accounts184 / 218 · 84%
Authentication analytics (24h)
Login success rate99.6%
Failed logins142
MFA adoption82%
Avg auth latency76ms
Privileged actions31
WS-3 Roadmap
1
DiscoveryWk 1–2
Inventory existing IAM, RBAC and tenants
done
2
ArchitectureWk 3–4
Keycloak realm + SCIM design signed off
done
3
FederationWk 5–7
SAML/OIDC trust with 42 tenants
En route
4
MigrationWk 7–9
Bulk + JIT user migration with reconciliation
En route
5
Cut-overWk 10
DNS swap, decommission legacy auth
Planned
Keycloak Realm
company-a-unified
Active
MFA Policy
TOTP + WebAuthn
Enforced
Break-glass Accounts
4
Vaulted
SCIM Sync (24h)
2,184 events
Healthy