[keycloak-user] securing 3rd party non-OIDC/SAML applications