[keycloak-user] Mapping SAML response elements to OIDC token claims