Hello,
Sorry, I'm new to Keycloak and just trying to understand...

I've EKS - K8s cluster, nginx ingress controller and oauth2-proxy. My identities are stored in AzureAD.

Option-1:
I can configure AzureAD as IDP to OAuth2-Proxy. No Keycloak.

Option-2:
I can configure Keycloak as IDP to Oauth2-proxy, and then I configure AzureAD to Keycloak as IDP.

What benefit(s) do I get if I select Option-2 ? What can I do extra which cannot be done without Keycloak?

Thanks & Regards