An SAML 2.0 identity provider. Not compatible with the property oidc or aws. Structure is documented below.