By default Keycloak is installed and configured so that it can be used by the Studio using the OIDC protocol. See Studio Security Modes for information on how to switch the Studio to OIDC.

Keycloak admin credentials

...

The secret for the studio-server client must also be provided to the Studio backend in [Installation_Folder]\Studio\Services\StudioService.exe.config in the oidc and oidccustom elements. This is normally done during installation, but when generating a new secret in Keycloak this must be updated manually.

Client Scopes

A client scope studio is included in the realm. When requesting an access token, this scope will activate mappers which add additional information to resulting access token. This information is required by the Studio backend in order to validate the token.

...