HR & internal systems / SaaS API / admin console
IDHub — new build of an SSO platform integrating 10 internal systems

Login to 10 internal systems,Built a new SSO platform unified by a single ID.

OpenLab Inc. — Moving from a state where each business system (accounting, HR, recruiting, etc.) issued its own ID, we built a central SSO gateway integrating Microsoft 365 / Google Workspace. With short-lived JWT tokens + Redis revocation management, offboarding on departure now runs instantly.

10+
Integrated internal systems
Across accounting, HR, recruiting
500+
Active employees
One ID covers all employees
80ms
Auth response (P95)
Redis blacklist · instant revocation
Challenge
Before

Running separate logins per business system pushed password reuse, lingering accounts after departure, and IdP-switching rework costs onto the IT department — and had reached the limits of audit compliance.

  • Curb data-leak risk from password reuse
    10 systems × separate IDs / 3–4 reused on average
  • Bring missed account deletions on departure to zero
    Manual offboarding / 1–2 missed deletions per month
  • Eliminate per-system rework when switching IdPs
    Microsoft → Google switch / per-system rework on 10 systems
  • Revoke tokens instantly when unauthorized access is detected
    Long-lived JWT / up to 24h revocation lag
Solution
After

Built a new API-based central SSO gateway that plugs in Microsoft 365 / Google Workspace. IT consolidates on/offboarding into one place, employees get single sign-on to every internal tool with their existing corporate account, and management standardizes audit response.

SSO flow — auth ~ token issuance ~ business-system integration Employee 500 IT admin On/offboarding ops IDHub Core JWT issue / revoke Laravel + Redis Microsoft 365 Graph API integration Google Workspace OAuth2 / Socialite Business-system integration Accounting, HR, Recruiting… Unified auth platform — operational impact 10 IDs → 1 ID Offboarding applied instantly No rework on IdP switch
idhub.example.jp/admin/users
Manage + New invite Employee IdP Permissions Status Yamada Sho MS 365 Accounting / HR Active Hayashi Misaki Google Recruiting / Reviews Active Sato Yukari MS 365 IT management Active Takahashi Osamu MS 365 Accounting / Sales Invited Nakamura Ichiro MS 365 — Offboarded All-employee account status Active 482 / Invited 14 / Offboarded 4 Export CSV 1 - 5 / 500 ‹ 1 2 3 ... 100 ›
Unified user management — see IdP, permissions, and status on one screen
Tech stack Laravel 7 JWT MongoDB Redis AWS S3
4months
12person-months
Considering adoption at your company? → info@amela.vn