Hi Bill,

I have some doubts with regards to the issues:

Issue 16: When the user is asked to give permissions, won't they see the pop ups from Facebook or Google? Or will them see a popup with Keycloak style inside Keycloak? If so, will they probably have to authorize different permissions of different social providers, do they?

Issue 17: With regards to the OAuth grants, same doubt, is not this made in Google?

Issue 24: I guess it is related to 17 and 16. 

Below are some proposals:
https://gatein.mybalsamiq.com/projects/keycloak/Linda%20edit%20account
https://gatein.mybalsamiq.com/projects/keycloak/Linda%20configure%20Google%20Authenticator
https://gatein.mybalsamiq.com/projects/keycloak/Linda%20change%20password

Gabriel