https://www.mutuallyhuman.com/blog/choosing-an-sso-strategy-saml-vs-oauth2/