Looking at the orthanc-auth-service repos example docker-compose files it seems it is assumed that keycloak at least runs on the same server (not necessarily in docker).
How to connect the service to an existing keycloak that runs on a different server?
mfg²