Why
So users can login to UPS using their OpenShift credentials

How
Currently, the keycloak-js adapater is used, and the keycloak config is retrieved from the ups server.
https://github.com/aerogear/unifiedpush-admin-ui/blob/master/app/scripts/keycloak-init.js#L11

This lib may need to be changed/swapped out for one that provides the right OAuth flow that works with OpenShift.
It may be worth looking at what origin-web-console uses for this (when it's running in standalone mode)

• https://github.com/openshift/origin-web-common/blob/master/src/services/redirectLoginService.js
• https://github.com/openshift/origin-web-common/blob/master/src/services/authService.js