How to map user attributes to external IDP claims in a Keycloak instance...

how to map claim coming from Identity Provider to a role Group in Keycloak?...

dockerized Keycloak as Idp and Idp Broker (same address and port)...

Second login with remote IdP through Keycloak fails, "Invalid username or password"...