You use Entra. Entra can do jwt’s.

Saml is just not reasonable in our modern security environment.

Entra is just allowing the Chinese government in your environment. Why bother with authentication at all?

https://www.war.gov/News/News-Stories/Article/Article/428899... (Microsoft has solely discontinued this practice for the DoD tier. Commercial, GCC, and GCC High are still impacted because foreign labor is cheaper than the risk to your security.)