Cloud IAM / Keycloak openid connect integration

Migrated issue

Reported by: heddn

Related to !73 !74 !15 (merged)

Problem/Motivation

We could do form alters and use the "generic" openid connect integration provided by this module. However, that seemed like more work/effort. It is easier to just add a new namespaced client that extends the generic one.

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

Related issue: Issue #3338978