Keystone SAML2 issue