For EAP, replaced overlord-commons SSO installation with keycloak and moved sramp artifacts back to standalone deployments. Have setup basic auth security in s-ramp-server - tested with REST client with basic auth and it works. So just need to get bearer token delegation working from Java S-RAMP client, and work out what to do (if anything) about maven client