We have users who login as Keycloak users and also users who login as AD users (we have created a saml Indentity Provider in Keycloak).
When logging in as a Keycloak