We use keycloak 9.0.3 and connect it to an SAML IdentityProvider. We want to use LDAP for UserFederation but not for Authentication, because Authentication is made by smartcard.