SAML is fine, no need for OIDC. Someone else mentioned SCIM, which is a highly desired addition, but not a hard requirement for me so long as a public API exists that I can use to automate the user lifecycle.