If your Keycloak IdP supports SAML2, it should work if you return the same attributes/assertions.
Did you get somewhere with TAC already? As this is a 'niche' scenario, in case you feel that the assigned engineer does not fully understand your case, ask for a case escalation.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------