A while ago we met w/ Stian Thorgersen to discuss a more isolated solution, as discussed above (e.g. "Ideally I just want to run a keycloak (e.g. as a docker container) and throw JSON config at it (+ here is my theme). ....")

What we need is that we would just throw "configuration" at a running KC server and it would result in an auto registration of the UPS on that KC server, as one of its protected applications.

According to Stian this will be in KC 1.3 or more likely in 1.4