1. Display name
...
Set Client Signature Required to Off
Paste the Reply URL into URL into the following fields:
Valid Redirect URIs.
Master SAML Processing URL.
...
https://<keycloak server>/auth/realms/<realm>/protocol/saml/descriptor
Substitute <keycloak server> with the DNS of your Keycloak server.
Substitute the realm identifier <realm> with your realm.
Alternatively, you can download the metadata file to disk and upload it in the KSSO wizard.
...