After my first try with the ESI SSO, I came to a point with the integration in Keycloak where I put the keycloak only supports OpenID requests and send them always the scope openid.
Am I right in assuming that the ESI SSO doesn’t like this and that I have to get rid of the parameter somehow?