https://ones.com/blog/saml-authentication-flow-diagram-explained/