is a tool that manages access to resources across multiple services