Yes, you can do both. We actually have a guide about keycloak: https://docs.windmill.dev/docs/misc/setup_oauth#keycloak

For the second part, you can just iframe the whole public app and we will provide a React component soon.