Keycloak
Continue To Internal Auth
After sign-in, approved internal users are redirected back into import operations and the Oban dashboard.
Internal Access
Operator Sign In
MatchSense teammates use Keycloak to access the internal operator surface at /ops/*.
Access Policy
- MatchSense email domains are auto-provisioned into the internal admin table on first sign-in.
- Non-domain users can still be granted access by creating a pre-approved admin row before login.
- Public user authentication is intentionally not wired into this flow.