keycloak-saml2.xml

<keycloak-saml-adapter xmlns="urn:keycloak:saml:adapter">
    <SP entityID="sp"
        sslPolicy="ssl"
        nameIDPolicyFormat="format"
        signatureAlgorithm=""
        signatureCanonicalizationMethod=""
        forceAuthentication="true"
        isPassive="true">
        <Keys>
            <Key signing="true" >
                <KeyStore file="file" resource="cp" password="pw">
                    <PrivateKey alias="private alias" password="private pw"/>
                    <Certificate alias="cert alias"/>
                </KeyStore>
            </Key>
            <Key encryption="true">
                <PrivateKeyPemmm>
                    private pem
                </PrivateKeyPemmm>
                <PublicKeyPem>
                    public pem
                </PublicKeyPem>
            </Key>
        </Keys>
        <PrincipalNameMapping policy="policy" attribute="attribute"/>
        <RoleMapping>
            <Attribute name="member"/>
        </RoleMapping>
        <IDP entityID="idp"
             signaturesRequired="true"
                >
            <SingleSignOnService signRequest="true"
                                 validateResponseSignature="true"
                                 requestBinding="post"
                                 bindingUrl="url"
                    />

            <Keys>
                <Key signing="true">
                    <CertificatePem>
                        cert pem
                    </CertificatePem>
                </Key>
            </Keys>
        </IDP>
    </SP>
</keycloak-saml-adapter>