Automating role-based access control (RBAC) at scale
Jun 20, 2025James Wormwell

Summary
This post details the implementation of a Role-Based Access Control (RBAC) Accelerator program, demonstrating how to integrate GitLab with Keycloak and OpenID Connect (OIDC) for automated user provisioning and role mapping. It covers setting up a local Docker environment with GitLab and Keycloak, generating SSL certificates, configuring OIDC for authentication, and designing a scalable group hierarchy. The post emphasizes the practical application of least-privilege policies and how this foundation enables broader transformations like the Secure SDLC Accelerator.