ACS provides the ability for existing systems to authorize services from a SAML IdP. With the ACS service, no software changes are required for the systems or the SAML infrastructure.
based on a customized open-source Keycloak environment. The off-the-shelf Keycloak system does not provide the capabilities described in this document.