The problem
Routine password resets went through the help desk.
How it works
Employees reset their own Active Directory password over LDAPS after signing in with Google Workspace SAML.
Keeping it safe
Rate limiting behind a reverse proxy. What else did you consider?
Shipping it
The CI/CD pipeline delivers a Docker image to Artifactory and on to an EC2 instance.