Hacker News Reader

The issue is that SSO is often in the Enterprise tier.

The best solution would be to have G-Suite SSO in the lowest paid tier and SAML in Enterprise.

The issue there is that G-Suite's OAuth2 implementation doesn't yet support PKCE.