Description of problem:

The current LDAP catalog provider set up in the documentation here is missing instructions on setting up LDAP UUID ingestion in Keycloak, which is required to use the default sign-in resolver.

See relevant review comment:

Please see the instructions to set up a custom scope in the Keycloak client here in the PR description under How to test changes / Special notes to the reviewer and an additional config here.