Adding Enterprise SSO (SAML/OIDC) to a SaaS is way more painful than I expected…

One thing surprised me a lot:

how complex Enterprise SSO integration actually is.

At first, I thought:
“Just add SAML or OIDC and done.”

Reality:

• Different IdPs (Okta, Microsoft Entra ID, Google, etc.)
• Metadata configs that break easily
• Mapping users & roles
• Long enterprise setup cycles
• Endless back-and-forth with IT teams

And the biggest issue:
Most dev teams only think about SSO when their first enterprise client asks for it.

So I started working on a small project , focused on one goal:
making it possible to add enterprise SSO to a SaaS with just two function calls instead of weeks of custom integration.

Now I’m curious:
Have you ever had to integrate SAML/OIDC in your product?

If yes:

• Which IdP did you use?
• What was the most painful part?
• How long did the integration take?

Would love to hear real dev feedback 😅