I'm going to need to implement reference tokens for openshift soon after I come back from vacation. I've tried to spec it out here: https://issues.jboss.org/browse/KEYCLOAK-7002 -- Bill Burke Red Hat