Your comments

more than SAML, it would be ideal to go the route of OpenID Connect.


support of social authn like google, facebook, twitter etc would be ideal... aling with U2F support with yubikeys