See my answer in this thread.
Keycloak as identity broker only without managing users - Configuring the server - Keycloak
You can configure the “first broker login” authentication flow to change this behaviour
See my answer in this thread.
Keycloak as identity broker only without managing users - Configuring the server - Keycloak
You can configure the “first broker login” authentication flow to change this behaviour