[keycloak-user] Delegated SAML authentication?