@luckow Thanks, this is a great news!
However, this solution is not possible for us because we use modules in some apps that synchronizes groups and roles with Keycloak.
And it would be too much work to migrate all or ecosystem to another SSO.
Moreover, users would need to recreate their password.