Secure Client IAM Portal
Keycloak Identity Experience and Client Access Layer
Built a reusable identity and client-access foundation using Keycloak, Keycloakify, Next.js, NextAuth, and GraphQL so client-facing applications could share a secure authentication experience without rebuilding login, account, and API integration work for every product.
Client
The Conrad Group
Completion
3 months
Category
Identity & Access
Situation
The Conrad Group needed a consistent authentication and client portal foundation for internal and client-facing applications. Separate products were beginning to require branded login flows, account experiences, GraphQL-backed data access, and repeatable production Keycloak configuration.
Task
Design a secure IAM and portal pattern that combines branded Keycloak login/account experiences with a standalone Next.js client portal, while keeping deployment and troubleshooting steps documented enough to reuse across future applications.
Action
→Built custom Keycloak login and account experiences with React, Tailwind CSS, Keycloakify, Storybook, and reusable UI components
→Integrated a standalone Next.js client portal with NextAuth.js, Apollo GraphQL, and type-safe React application structure
→Documented Keycloak production setup, client configuration, CORS handling, client-secret troubleshooting, and local testing workflows
→Organized authentication, portal, and API integration concerns so future applications can reuse a common identity foundation
Results
✓Established a reusable client IAM pattern for secure applications across The Conrad Group platform
✓Reduced future application bootstrap friction by separating identity, portal, and GraphQL integration patterns from product-specific code
✓Improved operational readiness through setup, production, and troubleshooting documentation
✓Created a portfolio-safe demonstration of identity UX, access control, and client-facing platform architecture