[keycloak-user] Keycloak as an identity provider (either SAML or OpenID Connect)?