For the moment we only support grant, although there is currently an RFC going to update Grant to support the new addition of Apple sign in:
https://github.com/strapi/rfcs/pull/20
From what I can tell Grant/purest doesn’t currently support keycloak: GitHub - simov/grant: OAuth Proxy