Configure Certificate-Based Authentication (CBA) for SSO Between Keycloak and Azure AD

I am looking for an experienced professional to help us configure certificate-based authentication (CBA) for Single Sign-On (SSO) between Keycloak and Azure Active Directory (Azure AD).

Scope of Work:
1. Keycloak Configuration:
a. Set up Keycloak as a SAML Service Provider.
b. Enable certificate-based authentication in Keycloak.
c. Configure SAML identity provider settings with Azure AD.

2. Azure AD Configuration:
a. Configure Azure AD Enterprise Application for SSO using certificates.
b. Assist in obtaining the federation metadata XML or guide on constructing the metadata URL.
c. Upload and link the Keycloak public certificate in Azure AD.

3. Testing and Validation:
a. Ensure successful SSO authentication flow between Azure AD and Keycloak.
b. Validate the certificate-based authentication mechanism.
c. Provide troubleshooting support for any issues.

Documentation:
Deliver step-by-step documentation of the configuration for future reference.

Requirements:
1. Proven experience in configuring SSO using Keycloak and Azure AD.
2. Hands-on expertise with certificate-based authentication.
3. Familiarity with SAML protocols and Azure AD Enterprise Applications.
4. Ability to troubleshoot and resolve SAML authentication issues.
5. Strong communication skills for effective collaboration.

Deliverables:
- Fully configured Keycloak and Azure AD for certificate-based SSO.
- Comprehensive documentation of all steps taken.