SSO via SAML

Enable SSO via SAML so that IdPs can be used (Duo, Okta, Azure, etc.).