[keycloak-user] enable CORS

Hi, We are using keycloak as a SAML2 IdP for a web application (SOGo). Logging on works fine, however, after a while SOGo stops working. I asked SOGo support to take a look at this, and they told me: "You'll need to enable CORS headers on our IdP keycloak.ourcompany.com so I can continue the debugging. The redirect is currently blocked for this reason." I cannot find any keycloak toggle that would enable CORS headers. Could anyone tell me how to do this..? MJ