Features

• Keycloak-based central IAM and SSO: Configured to centrally manage user authentication, OIDC-based SSO, account/password policy, and group/role for each branch.
• External system M2M authentication: Service Account and OAuth 2.0 Client Credentials methods were applied to allow external systems to use the EVA App API without user login.

Internal Improvements

• Central session and event management: Logout, account change, and session invalidation events are delivered to multiple EVA Apps through Dispatcher and central Redis.
• Authentication infrastructure standardization: A central authentication infrastructure consisting of Keycloak, PostgreSQL, Dispatcher, central Redis, and central/branch Ingress was applied.
• Security policy integration: Centrally manages password expiration/reuse restrictions, login failure lockout, long-term inactive user lockout, and audit log policies.