[keycloak-user] manipulate IdP attributes in authentication script