Keycloak is used as an Identity Manager that federates authentication of users present in external identity providers such as LDAP.
To enable users present in external to access VMware Telco Cloud Service Assurance, the administrator user logs into the keycloak console and provisions the LDAP connection and mapper details.
For more information LDAP and Keycloak integration, see the KB article.