This is intended to provide oauth2 and oidc, which means you won't need keycloak.