Federal acquisition lifecycle manager.
Insert your smartcard and choose your certificate when prompted. Keycloak handles all certificate validation.
Redirects to Keycloak. For accounts without a PIV/CAC card.