I have successfully integrated my AEM instances with Keycloak-based SAML clients many times in the past. I would prefer to implement an OIDC client in Keycloak that I can use to authenticate when accessing my author instances.  My publish instances are always either behind web-server based authentic...