Oauth2 keycloak setup?

How do I get discourse working with keycloak with oauth2 or sso.
With oauth2 I just get an long wait after logging into keycloak and then an bad gateway error on the discourse site.