WHY
Time to time SREs will get alerted about clusters with Install of RHOAM addon has exceeded timeout. When investigating, SREs have noticed that the installation is failing due to duplicate users in SSO instance.
SREs used to have access to user-sso edge route, which was removed sometime back.
We have created a JIRA to add that back in MGDAPI-5785
Note that above route is not going to help when it is a private cluster.

WHAT
Requesting a SOP that guides SREs on how to remove an offending user entry by removing the entry in the user-sso DB.

HOW
If the KeycloakUser CR has a 409 conflict error we can delete the user from Keycloak to allow the CR to reconcile.

We may need to implement this for cluster SSO and user SSO

TESTS
<List of related tests>

DONE
<bullet point items for what should be completed>