Realms are defined in a chain, so each realm that supports a type of token will be called in order until one has successful authentication or the chain ends.
Can you share your full configuration? I am not sure but maybe docker plays an issue here. What image are you using?