Configure keycloak as an SSO for different websites and applications

Our company has been active in the field of solar photovoltaics connected to the network for 15 years. We want to use Keycloak as an SSO for all our applications: Prestashop 8 and some other applications (in Laravel and React)… We want our users to be able to log in everywhere with the same credentials. Also, we need to be able to manage access to our different applications: - Our customers will only use the prestashop. - some people will use prestashop and one of our laravel website - Some people will need access to one application but not the others… On keycloak we should be able to have different groups and roles. Those will determine which applications you can access (and within the applications, what you can do) skills required : keycloak knowledge would be great. Experience and deep understanding of SSO systems and how they work is of course mandatory Knowledge of Laravel is a plus