[keycloak-user] Keycloak as OpenID Connect Identity Provider?