[keycloak-user] SAML question

I need to add Active Directory attributes to the SAML assertion. Is there documentation on how to do this? Specifically I need to add givenName and sn to the assertion that already has the email attribute.