IMPALA-10437 adds SAML2 browser profile support to Impala.
Supporting it in Impyla would allow implementing SAML auth for Impala shell, and make SAML related EE tests simpler.
The simplest way would be to allow passing a bearer token in https://github.com/cloudera/impyla/blob/0914895830609001b9d4f535573cba8db487d45e/impala/hiveserver2.py#L796
I am not sure about the other parts of the SAML logic (e.g. communication with the browser) - it could be added to Impyla too or reside in Impala shell.