To configure a web reverse proxy for identity bridging (SAML to Kerberos), you must have saved the identity provider metadata file to Unified Access Gateway.
You can then enable identity bridging on the admin console and configure the external host name for the service.