Hi,
I assume that you have one service user that is used to execute gateway services and you map every external user to this user. I don't think that you will be able to get original user. I am not sure even if identity provider passes this info to service provider. I guess it issues authentication token for your service user only.
Cheers