Book an initial call
Book an initial call

Legacy customer IAM replaced by Keycloak

65,000 customer accounts and more than 60 applications moved from an in-house system to Keycloak, without a production outage.

View case study

Identity Governance

38 use cases designed for a central IAM in public administration, on two coupled platforms.

IAM Migration

Legacy customer IAM replaced by Keycloak after more than 20 years. 65,000 customer accounts, no production outage.

Application Onboarding

Around 2,500 applications onboarded to SailPoint IdentityIQ, with a fixed process and a security test before every release.

Privileged Access Management

Privileged access secured, documented in a traceable way and governed in line with compliance requirements.

The challenge

Starting point and challenges

01

In-house system without documentation

The client had built the customer IAM system in-house more than 20 years earlier. There was no documentation.

02

Many customizations

Over the years, numerous client-specific customizations had been added.

03

Failed attempts

Earlier attempts to replace the system had failed because of its complexity.

04

Live operations

Production with 65,000 customer accounts could not be disrupted at any time.

05

More than 60 applications

Every application depended on the old system and had to be switched over individually.

06

Parallel operation

The new environment had to be built and run alongside the legacy system.

Our solution

Our approach

Analysis without documentation

WertFels took over overall project management. As there was no documentation, we reconstructed how the legacy system behaved from stakeholder interviews and reverse engineering.

Keycloak alongside the legacy system

Migrating customer accounts

Switching application by application

Shutdown after more than 20 years

The results

The results

Results 2023 to 2025

100%

Applications switched

all applications moved from the legacy system to Keycloak

65,000

Customer accounts

migrated to Keycloak

0

Production outages

during the entire switch-over

100%

Decommissioning

legacy system shut down, servers decommissioned

100%

Project management

by WertFels

8 months

M1
M2
M3
M4
M5
M6
M7
M8

Switch-over of all applications

one application after another

More success stories

More case studies

Privileged Access Management

3,200 privileged accounts secured in 6 months

Privileged access management for a German financial services group, with 100% PAM coverage of all privileged accounts.
View case study

Identity Governance

38 use cases designed for a central IAM in public administration

Two integrated platforms, Garancy for identities and DirX for accounts and roles, plus 38 use cases and a six-stage release plan.
View case study

IAM Migration

Legacy customer IAM replaced by Keycloak after more than 20 years

65,000 customer accounts and more than 60 applications moved from an in-house system to Keycloak, without a production outage.
View case study

Application Onboarding

2,500 applications onboarded to SailPoint IdentityIQ

For a German financial services group: a standardized process, classification by effort and a mandatory security test before every release.
View case study

Ready for the next step

Your next project

Tell us briefly about your project. We will get back to you and discuss where your IAM stands today.

    Thank you for your inquiry

    Your message has been sent.
 Our team will get back to you as soon as possible.