[Solved] Nextcloud <-(SAML)->Keycloak as identity provider issues

if anybody is interested in it…
The problem was the role mapping in keycloak.
Delete it, or activate “Single Role Attribute” for it.