I'm only just getting an understanding of some of the various protocols and standards in this world, but I'm working from a set of developers' specs for a software project and one thing that they list is to use OpenID Connect. 

I can see from Chapter 9 of the Documentation how to configure the Identity Broker for various types of Identity Providers. But I can't find anything that suggests that Keycloak can act as the Identity Provider for OpenID Connect. I fear I might be missing something obvious.

The information on the OpenID.net site ( http://openid.net/developers/libraries/ ) lists Keycloak, but it does not have details on whether it can only act as a Relying Party, or if it can also act as an Identity Provider.

Any thoughts or pointers to something I'm missing in the docs would be appreciated.

Thanks.

 -- Tom