Contact

Centralized access management

Corporate Systems Platform

In development

Will centralize user and access management across the group’s applications, along with database monitoring and backups.

Problem

Each application currently maintains its own user directory. Adding an employee requires creating an account in every application, and there is no single view of that person’s assigned access.

Solution

The central service manages users, access, and single sign-on in one place. Other applications are being integrated in phases; monitoring and backups remain in development.

Outcome

User and access management, the administration console, and single sign-on are complete. The first application is integrated and validated across the full sign-in flow.

My role

My role covers modular architecture, backend development, the administration console, integration libraries, and the onboarding guide for each application.

How it works

The platform is still in development. It groups functions by area and clearly identifies what is complete and what remains in progress.

Scroll horizontally to view the full diagram.

Centralized access architecture and phased application integration The console manages identities and access through a central service. An adapter exchanges session and permission requests with each integrated application, which retains its operational database. Monitoring and backups remain in development. CENTRAL PLATFORM GROUP APPLICATIONS IN DEVELOPMENT MANAGE STORE REQUEST AUTHORIZE PERMISSIONS SESSION DATA INTEGRATE MONITOR BACK UP ADMINISTRATOR Console Users and access CORE Central identity Single sign-on and permissions DEDICATED RDS Access directory Users and roles INTEGRATION LIBRARY Adapter Integration contract IMPLEMENTED Integrated application First integration validated EXISTING DATABASE Operational data Remain in the application IN PROGRESS Other applications Phased integration IN DEVELOPMENT Monitoring Availability and alerts IN DEVELOPMENT Backups Verified backups IMPLEMENTED FLOW SIGN-IN AND PERMISSIONS IN PROGRESS / DEVELOPMENT
Identity and permissions are managed by the central service while each application retains its operational data. The first application is integrated; the others are being added in phases, and monitoring and backups remain in development.

Current status

Applications are integrated in phases and validated independently, so migration does not interrupt group operations. The first integrated application already runs with single sign-on validated across the full authentication flow.

ComponentStatus
User and access managementCompleted
Single sign-onCompleted
Application-specific roles and permissionsCompleted
Administration consoleCompleted
Connected application inventoryCompleted
Application integrationIn progress
MonitoringIn development
BackupsIn development

Technical details

Backend
NestJS · TypeORM · PostgreSQL 16 · modular architecture
Console
Vite · React
Custom components
Integration libraries for the group’s applications
Infrastructure
Dedicated RDS PostgreSQL database; existing applications retain their own databases
Documentation
Architecture, integration contract, and application onboarding guide