Did you get any response to this question? This looks like a limitation in keycloak. Has anyone been able to set this up?