With centralized identity management, you manage suppliers, dealers and project partners in one place. Benefits include: faster onboarding of new partners, less support through self-service, consistent access rights across all portals, and a unified login experience for your partners. loginfactor supports you with design and implementation.
SSO reduces friction: partners log in once and can switch between order portal, document area and project platform – without logging in again. This improves adoption of your portals and reduces support requests about forgotten passwords.
Yes. Keycloak supports various MFA methods: TOTP apps such as Google Authenticator, SMS codes, email confirmation or hardware tokens. loginfactor advises which method is practical for your partners – MFA for everyone or only for sensitive areas.
Keycloak supports the standards OpenID Connect (OIDC) and SAML. This makes it possible to connect most modern applications – from standard products to custom-built portals. loginfactor supports setup and the implementation of OIDC in custom applications.
Yes, with the loginfactor delegated-admin extension. Partner admins can create sub-accounts for their employees and assign permissions – within the limits you define. This function is not part of standard Keycloak; it is a loginfactor extension for B2B scenarios.
Yes. Keycloak provides standardized, proven security – tested and continuously improved. Custom-built login systems are error-prone and require ongoing maintenance. With Keycloak, you get MFA, password policies and session management from a single source. And if additional portals or partners are added later, SSO is already prepared.
loginfactor specializes in B2B and partner IAM. loginfactor provides its own extensions for self-service and delegated administration that are missing in standard Keycloak. Plus: managed hosting in EU-based data centers, consulting for complex partner scenarios and support in English and German.
