Customer portals with Keycloak

loginfactor supports multiple migration paths for existing user accounts: batch migration (mass import with password-hash compatibility for bcrypt, PBKDF2, etc.) and on-login migration (users are migrated automatically on first login). We plan attribute mapping, data cleanup and rollback strategies. The goal: your users keep their credentials and ideally don’t notice the system change. loginfactor performs migrations for customer portals with SAP Commerce, Shopware, Salesforce and custom systems.

Yes. Keycloak supports social login via identity brokering with Google, Apple, Microsoft, Facebook, LinkedIn and other identity providers (IdPs). Passwordless options include WebAuthn-based passkeys (fingerprint, Face ID, Windows Hello), magic links via email and OTP (one-time passwords) via SMS or authenticator apps. loginfactor implements these methods in customer portals in a GDPR-compliant way and combines them with fallback options for maximum compatibility. This reduces registration drop-offs and measurably increases conversion.

loginfactor offers Managed Keycloak with service level agreements (SLAs) starting at 99.9% availability, optionally up to 99.95%. Hosting can be in your cloud (AWS, Azure, Google Cloud), on-premises or as SaaS in EU-based data centers. Included: 24/7 monitoring, automatic backups, security updates, high-availability architecture (redundant hardware clusters, automatic failover) and optional 24/7 support. For critical customer portals with high traffic demands, we use load balancing and horizontal scaling. For bring-your-own-cloud scenarios, we can implement multi-AZ deployments for geographic redundancy.

loginfactor consistently implements GDPR requirements: data minimization, role-based access control, self-service for users (profile management, data export, account deletion), audit-proof audit events and secure backup concepts. Consent management can be implemented via Keycloak policies or the loginfactor contract management module: users must accept T&Cs, privacy policies or terms of use before they receive access. Updates to documents trigger renewed consent requirements. loginfactor supports you with documentation for GDPR audits and technical/organizational measures (TOMs).

Yes. Keycloak is a central identity provider (IdP) and enables single sign-on (SSO) via OpenID Connect and OAuth 2.0 between customer portal, e-commerce shop, support center (e.g., Zendesk, Jira Service Management), knowledge base and other systems. Customers log in once and are authenticated across all channels – without logging in again. loginfactor integrates Keycloak SSO into existing IT landscapes (ERP, CRM, DMS) and synchronizes identities with CRM/CDP systems for a 360° customer view. Deep links with auth tokens enable seamless transitions between systems.