Thanks @jkressin, In proxy auth, I couldn’t get roles in header so I will set SAML proxy using simplesamlphp as (IDP and SP) and searchguard. This will let discover service on simplsamlphp sp and simplesamlphp idp to kibana saml.
If required I can write a blog post which can be used by community.