Major Description
This task is really about providing a filter/interceptor which can check if SAML assertion is available (ex, expect it to be in a form submission) and if not then redirect the consumer to a preconfigured IDP address which will authenticate the user and redirect it back with the assertion. Very similar to a main OAuth flow actually