Not too much on the KeyCloak side, as that was pretty straightforward. used the Python SP registration tool; Still, thanks for your help getting this far. http://adam.younglogic.com/2016/08/ooo-ha-fed-poc/