UMS.

Unified Management Stack · POC

Central is the source of truth. Users are created exclusively in central Keycloak; satellite realms federate inward to it, and Syncope governs every OpenFGA store downstream. Distribution flows central → satellite.

*.ums.poc.azync.io

Central plane

Central

Source of truth

Keycloak AuthN

Central Keycloak central-kc.ums.poc.azync.io

Realm ums · admin console at /admin/

OpenFGA AuthZ

Central OpenFGA central-ofga.ums.poc.azync.io

HTTP API — headless, playground disabled

Syncope IGA · central only

Admin Console central-syncope…/syncope-console/ Enduser Portal central-syncope…/syncope-enduser/ Core REST API central-syncope…/syncope/

Satellite plane · 5 orgs