I appreciate your help. Yeah, I'm not sure what the correct configurations would be for an environment without Kibana (or any other web app). I feel like I've gone as far as the OpenID config without Kibana document will take me.
I've created a revised version of my new question(s) here in hopes that someone with OpenID/Keycloak experience can chime in.