[keycloak-dev] Why does LDAP AD federation in some cases does not have the first name mapper by default?