[keycloak-user] identity broker SAML logout with redirect