[keycloak-user] SSO between OIDC and SAML