Skip to content

OVES Access Management

Welcome to the OVES Access Management system documentation. This project provides a comprehensive architecture for managing user identities, secrets, and access control across internal and external systems.

🏗️ Architecture Overview

Our system integrates three key components:

  • Azure AD - Identity provider for internal users (employees, contractors, sales associates)
  • Keycloak - Identity provider for external users (customers, partners, franchisees)
  • Odoo - Shared business platform with dual authentication paths

🎯 Key Features

  • Dual Identity Management: Separate but integrated identity systems for internal and external users
  • Centralized Secret Management: Secure credential storage and rotation policies
  • Single Sign-On (SSO): Seamless authentication across all systems
  • Role-Based Access Control: Granular permissions based on user types and responsibilities
  • Comprehensive Auditing: Complete audit trails across all systems

🚀 Quick Start

  1. Install Documentation Tools: 

    pip install -r requirements.txt

  2. Run Documentation Locally: 

    mkdocs serve

  3. Browse Architecture:

  4. Architecture Overview
  5. Implementation Guides
  6. Deployment Instructions

📋 User Categories

User Type Identity Provider Access Level Primary Systems
Employees Azure AD Full Internal Teams, Odoo, AWS Console
Contractors Azure AD Limited Internal Specific Tools, Odoo
Sales Associates Azure AD Sales-focused Odoo, CRM Systems
Customers Keycloak External Portal Customer Portal, Subscriptions
Partners Keycloak Partner Portal Partner Dashboard, Resources
Franchisees Keycloak Franchisee Tools Franchise Management

🔐 Security Principles

  • Zero Trust Architecture: Verify every user and device
  • Least Privilege Access: Minimum necessary permissions
  • Defense in Depth: Multiple security layers
  • Regular Auditing: Continuous monitoring and compliance

📖 Documentation Structure

Next Steps: Start with the Architecture Overview to understand the system design, then follow the Implementation Guides for hands-on setup.