Amazon AWS SAML Authorization via Keycloak IDP?

Question

Amazon Web Services

Hello!
Who has experience with Keycloak IDP?
Help solve the problem.
There is an account in Amazon AWS
There is a Keycloak IDP server version 2.1.0-final with users who are pulled up from the FreeIPA server via LDAP.
Task:
Authorize users with Keycloak IDP in Amazon AWS using SAML.
At the moment there are:
On the Keycloak IDP server, in the Clients section, added SAML metadata.xml from Amazon AWS
On Amazon AWS, Identity Providers added descriptor.xml with Keycloak IDP
On Amazon AWS, a role was created for Identity Provider with the appropriate access policy.
Question:
What to do next?
How do Keycloak IDP users log in to Amazon AWS?