How did you integrate keycloak with ELM? Did you also setup ldap or scim? Besides Authentication ELM requires a kind of user directory as well.
we used keycloak together with an ldap where keyclaok automatically creates the user in and assigns the right ldap groups corresponding to user information so the elm roles are set correctly.
It still requires that the user directory is updated before a new user can login, so the user is already existing in ELM, forwhatever reason ELM did not query the ldap for new users if user does not already exist in elm.