https://ones.com/blog/demystifying-saml-authentication-flow-diagrams/