SAML (keycloak) and 2FA issue

[ingox]

I did setup SAML by using keycloak in my CloudStack version 4.22. That works fine.
Now I was wondering if I can use 2FA on top of it. From what I understand that should work.
So I did configure 2FA for a user which is in keycloak.
After I did authenticate with keycloak successfully and should be asked for the TOTP I do see the following error.
Does anyone else have the same behavior?

That is a message coming from CloudStack. URL is http://xx.xx.xx.xx:8080/client/#/