Use keycloak as aws idp - role name invalid character ":"