May I blow your mind? Have a look at https://cilogon.org https://cilogon.org — that is a service which takes a SAML Assertion, and returns to you either a clie

May I blow your mind? Have a look at https://cilogon.org https://cilogon.org — that is a service which takes a SAML Assertion, and returns to you either a client certificate or an OAuth authentication. The link I posted above shows the client-certificate flow. If you want to see the OAuth flow, go here: https://demo.cilogon.org https://demo.cilogon.org CILogon is used alot in the Research & Education space. But if you don't have an institutional logon, that's OK, just select 'Google' from the list of providers.