Comment by jf

As someone with a decade of hands-on SAML experience, I highly recommend against implementing SAML. Use OIDC instead.

This article covers many of the reasons to avoid SAML: https://workos.com/blog/fun-with-saml-sso-vulnerabilities-an...