Securing the monolith

Security is hard. Extending legacy software is sometimes even harder. But meeting deadlines while combining those two and maintaining code quality, while also staying sane, is the hardest.    This presentation tells a story about our transition from hand-made security to redhat sso / keycloak, a story of frustration and success.  We will show how we seamlessly migrated our six million users, where we encountered the limits of the standard solution and how we overcame them.    I hope that our experience would be interesting for a broader audience because we all deal with similar problems but by sharing we can avoid some mistakes and produce better products for our clients.