[keycloak-user] How to generate OIDC Token for users originating from a saml identity provider?