IMO we should not make KeycloakDS XA by default. Rather, the docs for the user federation provider should state that if you add another datasource you need to make that one XA.