[keycloak-user] Map SAML Subject NameID to user email