Identity & Access · Internal Platform
Azul Tech SSO — One Identity for Every Company App
Azul Tech runs a single identity system, built on Keycloak, for the whole company: one account per person, one login, used for every internal application, starting with Lunchify and extending to the HR platform and future apps. It runs on Azul Tech's own servers, so passwords and identities are never held by an outside service.
Measured impact
- One login across all company applications
- Mandatory two-factor authentication for every account
- Instant, company-wide offboarding
What we delivered
- 01Accounts are created from the staff list; each person receives a one-time link, sets a password nobody else ever knows, and enrols an authenticator app. Two-factor is required for everyone.
- 02Signing in means a password plus a 6-digit code from the phone. Forgotten passwords are reset by self-service link.
- 03When someone leaves, an admin disables the account and their access to every app ends immediately. A lost phone is handled by identity verification, a 2FA reset and a fresh setup link.
