Detachable IDP: Keycloak for wandering workgroups

What’s great about Keycloak is that it’s an “all in one container” that has SAML, OpenID and even some old school web access management features, like Realms and RBAC policies.