Allow third party login system with SAML

[alexandrevicenzi]

Many institutions still use SAML, instead of oAuth2, it's worth supporting it.

[rluders]

I think that we are good about this once, 'cause Keycloak also supports SAML - just need to update sumelms/roadmap#25 to include this information.