Hello, Looking at the Keycloak SAML adaptor for Tomcat I see that it seems to say the login authentication parameter from the web.xml are "ignored" (can't say SPNEGO, BASIC). Is there any way to implement FORM based authentication fallback for the Keycloack SAML Adaptor? <login-config> <auth-method>BASIC</auth-method> <realm-name>this is ignored currently</realm-name> </login-config> https://keycloak.gitbooks.io/documentation/securing_apps/topics/saml/java... Can something like this be done: <login-config> <auth-method>SPNEGO</auth-method> <realm-name>SPNEGO</realm-name> <form-login-config> <form-login-page>/login.jsp</form-login-page> <form-error-page>/error.jsp</form-error-page> </form-login-config> </login-config> Ken