CXF STSClient asks for user+password even though there is a SAML token in onBehalfOf

Question

I\'m using CXF\'s STSClient to request a JWT token on behalf of a user so I can call a REST service.

I have a valid SAML token and tried to configure the