Recommendations
It is not recommended to combine the Planon user federation and Keycloak local password verification. For this reason, we recommend to disable the Update password required action on the authentication section of the Keycloak configuration.
It is recommended to switch to the OpenID Connect authentication method for applications that support this as is described in the Planon Webhelp