I'm in the process of transitioning our production Hasura deployment to use Keycloak. So far things are pretty straightforward.