https://ones.com/blog/mastering-saml-authentication-flow/