[horizon][keystone] Adding different rules in the same protocol for federated logon