Azure AD - Keycloak - Kibana Single-Sign on (SSO) User/Group Role mapping

Question

I have setup Single-Sign on (SSO) using keycloak and saml/OpenID broking between a web application (using Kibana for testing) and IDP Azure AD.

Created few users and