Case Study

Identity & Access Management Implementation for an AgriTech Startup

Product Engineering
Industry
AgriTech — Dairy Supply Chain Management
Services
Architecture Design, Backend Development, Frontend Development, Quality Assurance
Company Size & Location
Growth-Stage Startup
Technology Stack
Java, Spring Boot, JHipster, REST APIs, Swagger, Keycloak, AuthServer, Realm-based multi-tenancy, React, Docker, AWS CloudFront, Bitbucket, JIRA
Team
Solution Architect · Backend Engineers · Frontend Engineers · QA Engineers
Timeline
Phased Engagement
01

Client Vision

The client is a growth-stage startup in the AgriTech space, building a range of technology-enabled solutions to improve dairy supply chain management. As the business matured, its product portfolio grew and so did the need to bring those products together into a single, coherent platform.

02

Challenge

Over time, the client had built multiple applications addressing different use cases and business requirements, each used by different dairy clients. These applications operated in isolation, each with its own login. The client wanted to integrate them into a unified platform architecture - starting with a single, shared login across all applications and to provide a single access-point dashboard from which different product admin consoles could be managed.

03

Solution

After a detailed analysis, we recommended implementing Identity & Access Management and selected Keycloak as the foundation. Around it, we built a microservices and API layer that unified authentication and access across the product portfolio.

Developed REST API services to connect multiple products into one platform.

Built API sets for user and organization management.

Produced API documentation based on Swagger.

Implemented multi-language support on API responses, driven by configuration (i18n).

Developed wrapper APIs around the Keycloak APIs to simplify integration.

Deployed the Keycloak identity manager in a Docker environment.

Connected services to an AuthServer, which in turn connected to the Keycloak server in Docker.

Modelled each dairy client as a separate tenant, with authentication and authorization managed through realm-based configuration.

04

Our Approach

Phase 1: Architecture Design

We analysed the existing applications and authentication needs, selected Keycloak after detailed evaluation, and designed a multi-tenant, realm-based IAM architecture that could unify login across products.

Phase 2: Backend Development

We built the REST and wrapper APIs, user and organization management services, and the AuthServer–Keycloak integration, deploying Keycloak in Docker.

Phase 3: Frontend Development

We delivered the single access-point dashboard and integrated the product consoles into the unified single sign-on experience.

Phase 4: Quality Assurance

We validated authentication flows, multi-tenant realm behaviour, social login, and multi-factor authentication across the integrated products.

05

Result / Impact

For the Client

  • Single sign-on implemented - one-time login provides access to different sub-product dashboards.
  • Dynamic switching of login methods based on settings for different realm configurations.
  • Multiple isolated applications unified into a single multi-tenant platform

For End Users

  • Support for social logins and multi-factor-authentication-based logins.
  • Multi-language API responses (i18n) for a localized experience across regions.
  • ~80% less repeat-login friction through single sign-on across products
  • ~50% fewer login and password-reset support tickets

For the Business

  • User management and support management modules delivered for centralized administration.
  • Single access-point dashboard to manage multiple product admin consoles.
  • ~60% faster onboarding of new dairy-client tenants via realm-based configuration
  • A scalable IAM foundation ready to absorb new products into the platform without re-architecting

06

Why It Matters

For a startup evolving from a set of separate applications into a true platform, identity is the hinge everything else turns on. Unified, secure access is what lets multiple products feel like one product, lets new tenants onboard quickly, and lets the business add offerings without multiplying complexity. By implementing a multi-tenant IAM foundation with single sign-on, social and multi-factor login, and centralized user management, the client gained a platform architecture that scales with its ambitions across the dairy supply chain.

Let's build

Bringing multiple products together into one platform?

Focaloid helps ISVs and product startups design and build cloud-native, multi-tenant platforms — from identity and access management and single sign-on to the microservices and APIs that tie everything together. Whether you’re unifying logins, onboarding new tenants, or scaling a growing product suite, we can help you do it securely and at scale.