[keycloak-user] Authenticate externally (broker identity) or locally