Skip to main content
The Access Manager plugin is made up of two independent services that work together:
  • Auth: Acts as the bridge between your applications and your authentication/authorization layer. It handles:
    • Access token generation (OAuth2).
    • Token refresh.
    • Credential validation.
  • Identity: Provides a clear interface—via REST API or the Console—for managing users and access controls. It covers:
    • User Management.
    • Machine-to-Machine (M2M) Credentials.
Everything is built for performance, simplicity, and extensibility.
Although Access Manager is split into two independent services, they don’t work in isolation. Each service depends on the other to function properly. Make sure both are up and running before diving in.
I