2FA / SSO for mail on Keycloak + ANGIE
Custom Keycloak 2FA provider, SSO at the web-server layer for OWA and Outlook clients
What was built
Exchange can't do a second factor the way we needed. And nobody was going to let me near its internals. So ANGIE went in front of OWA and the Outlook clients, and 2FA moved into Keycloak behind a provider I wrote. Exchange itself I never touched. Not one line. It runs in production. All corporate mail goes through it.
Stack
KeycloakANGIEMS ExchangeOWAOutlookOIDCTOTP
Other work
- Single source of truth for infrastructure
- Enterprise infrastructure from scratch
- Managed corporate access client
- Internal certificate authority with ACME
- Report access gateway on directory groups
- Workplace self-service: software and VDI
- Active Directory hygiene: GPO repair
- Active Directory modernization
- Zabbix + Grafana and automation
- Office-to-DC networking
- Virtualization and vCenter
- Distributed Veeam and DRP
- Infrastructure Q&A agent over MCP
- Multi-agent workflow for solo development
- LLM call analysis and BI/CRM pipeline