How I can configure NetIQ Access Manager as Service Provider in Keycloak (IdP)

Hi guys, I have successfully configured Keycloak as IdP to redirect my user (after login) with SSO to Amazon Connect service.
Now, I need to use NetIQ Access Manager as Service Provider in combination with keycloak as IdP.
How I can configure properly NAM in keycloak console?
My flow will be like this:

  • There will be user trying to connect to service on NAM (acting as a SAML SP).
  • NAM will redirect user to Keycloak for authentication (acting as SAML IDP).
  • User will authenticate on Keycloak server (if needed).
  • Keycloak will redirect user back to NAM with SAML response.
  • NAM will parse SAML response and locally authenticate user.
  • User will be redirect to Amazon Connect console

Thanks in advance, this is my first question and I hope to have satisfied all requirements and rules