[keycloak-dev] Adding GSSCrential as a claim when user browser is not running on the Active Directory domain