PrivacyIdea SAML based User Federation using Keycloak

How to use keycloak user federation so that users can will enroll new tokens in privacyIdea server.

This is a very unspecific question.