Just FYI - with Tailscale you can switch SSO providers by putting in a support ticket. I did it last year and it was a breeze.