[keycloak-user] OpenID Connect support