[keycloak-user] Fallback to secondary federation provider possible?