AllyGator

AllyGator is our own identity service — one account that already gets you into this portal, into ChessTier, and into whatever we build next. Built as part of the Incrediblez Collective, it's meant to be the single front door every project signs in through, instead of each app rolling its own login screen and its own copy of your password.

Verifies who you are, and keeps your private information exactly that — private.

What it actually does

AllyGator answers exactly one question — "is this really you?" — and stops there. What a signed-in account can actually see or do is left entirely to whichever app is asking, the same split this site's own access-group gating relies on for early-access releases. Keeping identity and permissions strictly separate keeps this layer small, boring, and easy to trust.

In boring, technical details

AllyGator is a custom-built CIAM service, written on top of Keycloak and shaped by our own IAM experience. It handles authentication and role management in one centralized place, while our consumers — the Portal, our games, and other apps — stay responsible for authorizing access within their own domains, based on the identity AllyGator confirms. As a single point of identity validation, it adds one common, reliable authentication layer across every project that uses it. Its realm schema is heavily customized to keep the personal-data footprint as small as possible — the goal is a security layer, not a profile of our users.

The goal, not all of it built yet

Collect as little about you as a login actually needs, and eventually let you bring whichever identity provider you already trust — Google, GitHub, a platform account — into one place instead of juggling a separate login per app. Today that's a single sign-in form and one shared account working across the Portal and ChessTier; broader identity-provider brokering is on the roadmap, not live yet.

Where it stands today

Realm-based, signed tokens, one account carrying across every connected app via SSO, no anonymous bypass anywhere it's wired in. Nothing fancy going on — the goal was never to be fancy about identity, just quietly correct about it.