[keycloak-user] connecting between rh-sso (tier 1) to rh-sso (tier 2) with identity provider