[keycloak-user] Priority order of OIDC Token mappings