[keycloak-user] LDAP user group membership not syncing