diff --git a/radar/2019-11-01/aoe-sso.md b/radar/2019-11-01/aoe-sso.md
new file mode 100644
index 0000000..7ad2781
--- /dev/null
+++ b/radar/2019-11-01/aoe-sso.md
@@ -0,0 +1,9 @@
+---
+title:      "AOE SSO"
+ring:       adopt
+quadrant:   platforms-and-aoe-services
+
+---
+To improve security and user experience we decided to install an organisation wide SSO and use OpenID Connect integrate with existing tools.
+We use Keyclok as the SSO server, which is backed by our LDAP.
+This also helps to implement new infrastructure security based on ["BeyondCorp"](/methods-and-patterns/beyondcorp.html).