Identity platform
Our own sign-in server: single sign-on, two-factor and passkeys.
Live
What it is
One sign-in system, on its own server, that handles login for the software built on it: our dashboard, and Kitchenry before it was paused.
How it's built
Keycloak with OpenID Connect, on a machine that runs nothing else. The apps never see a password: sign-in tokens stay on the server, and the browser holds only a session cookie that scripts on the page cannot read. It is checked against an eighteen-point hardening list, and its database is backed up hourly with a restore drill.
Where it stands
Live at idp.harbormediallc.com, and in daily use by the Harbor Media dashboard.
More screens
Get in touch
Want to know more about one?
Send us a note. We'll tell you what we can.
Or email [email protected]