This is the most security-aligned approach - storing credentials creates significant liability (breach risks, compliance requirements, password rotation policies) while offloading authentication to specialized providers reduces attack surface and improves user experience.

If you ran a saas, you'd know how much more supporting SSO costs and sing a different tune.