I feel this problem (I also find configuring keycloak clunky) - but I understand their problem. OIDC allows an arbitrary number of identity providers to regist

I feel this problem (I also find configuring keycloak clunky) - but I understand their problem. OIDC allows an arbitrary number of identity providers to register themselves - so there's not really a clear way to distinguish "config" vs "data" here. That said - They've recently improved importing and exporting realms, and it really solved a lot of my pain. Mainly - you can now directly import/export realms in the UI, and the server doesn't need to be stopped. Still a little more finicky than I'd like, but way less risky than having to reconfigure by hand.