[keycloak-user] have keycloak validate a SAML uid / token combination