[keycloak-user] converting OIDC token to SAML