https://vstellar.com/2017/08/configure-identity-sources-for-single-sign-on/