Keycloak Client-Aware Access Control

Keycloak's realm model allows any user in a realm to authenticate any registered client.