The irony is that an IdP (identity provider) with SAML-based Single-Sign On is supposed to be another line of defense alongside MFA. It’s like the security company you hired for your gated community hiring ex-cons!