> There is no meaningful difference, from a business model perspective, between SAML and OIDC (though: don't do SAML). Oh there absolutely is. The customers th

> There is no meaningful difference, from a business model perspective, between SAML and OIDC (though: don't do SAML). Oh there absolutely is. The customers that use OIDC use a relatively light stack and are generally okay with relatively simple setups. They're usually startups and are also the ones that can feasibly add SSO into your app themselves. The customers that need SAML are older, larger companies often with a custom mix of multiple hybrid AD and AzureAD directories for each department that need special handling with custom properties and realtime sync. You'll be spending at least a few engineer-months on support for them. I've been on both sides previously, I've seen it all.