[keycloak-user] basic questions regarding realm limitations and user provider (sap)