As someone who has managed keycloak in production for work, it's a solid solution but boy is it easy to make mistakes that cause difficult to debug issues. It's a headache that does what it says on the tin.