id-broker

cf identity broker creates identities that may be bound to apps which can use it to generate JWT tokens based on their cf instance client certificate