I emailed the author of this code a few months back: https://code.tf/thefarm/osticket-auth-saml and he said: "This plugin was written for the company I'm currently employed at. Feel free to use it, it should be working fine as is. We've been using it in production connected to Google IDP for half a year with no issues. The only known limit with the plugin is that it's not currently able to create user upon initial authentication, nor map roles from groups." I looked at this code also as it might be something which would mean we wouldn't need to create users : https://github.com/philbertphotos/osticket-multildap-authI think the author posts here occasionally ? However, I wasn't able to make this work for my environment so didn't pursue it any further.I'd be very interested in a SAML Auth plugin also, however, I have an extra overhead in that the department running SAML here requires applications support "Single Sign Out" in addition to "Single Sign On" which has stopped me from using SAML in another system.