[keycloak-user] external SAML for brokering - what is my endpoint?