identity management

Definitions

Remember that an Identity Provider is "something" that can hold credentials you can authenticate against, to simplify it's a database of users and their passwords. As such, LDAP and AD are both Identity Providers.

 An Identity Broker is a software layer that a) authenticates a set of credentials (ie. a user) against an Identity Provider and b) once the authentication is successful fetches temporary authentication credentials (including a token) from Amazon STS (ou keycloack) and returns it to the requester.

Keycloak is an IAM (identity and access management) solution

Identity Broker can use SAM protocol to talk to your Identity Provider