Rebuilding Remote Access · June 4, 2026 · 5 min
The identity spine: Keycloak in front of an existing directory
Before the mesh can ask 'who are you?', something has to answer with authority. This part stands up Keycloak as the SSO front door and federates the existing directory read-only, adding MFA without migrating a single account.