EDAT Keycloak OpenID Connect Provider
Unicamp-operated Keycloak authorization server (realm `edat`) that issues the credentials for the EDAT data platform. Verified live 2026-09-01: the OIDC discovery document at /realms/edat/.well-known/openid-configuration returns 200 (6,717 bytes) with jwks_uri, PKCE S256, device authorization, dynamic client registration, and Unicamp-specific scopes (uecEmailAccount, department_number, minio-authorization). This is a genuine institution-authored machine-readable contract - the realm configuration is Unicamp's own.