[keycloak-user] Add / customize IDP

What is the preferred way to add an idp? Or customize the existing SAML idp? Why is the interface IdentityProvider in an artifact called keycloak-server-spi-private? Does this mean that it shouldn’t be used? Kind regards, Sjef