https://ditidi.com/how-the-saml-standard-provides-single-sign-on-services/