[keycloak-user] How to use tomcat adapter for both saml and basic/form authentication?

Hello, I have implemented the keycloak tomcat adapter with ADFS as the IDP. All works fine, but if the user can not authenticate via SAML, how can I implement a fall back to a form based authentication? Ken