This is a repackaged open-source software product wherein additional charges apply for support and for providing it in a simple consumable AMI. Keycloak is the standalone tool for identity and access management. Keycloak is a separate server that is managed on a network, and applications are configured to point to and be secured by this server. When a user tries to access a browser application, they are redirected from the application to the Keycloak authentication server where they can enter their credentials. This redirection isolates the user from the application, so the application never sees the user's credentials. Instead, the application is given a cryptographically signed identity token or assertion.