SAML is a central IDM and reachable only from internal (corporate) LAN, while the Discourse server is public.
We would like the internal users to be able to login only from the office (or VPN), but while they can use local login method, they can login from everywhere and we can’t disable their login via SAM/IDM (this must be done manually in the forum).
It is not a big deal, but we have a policy that order us to connect to central IDM if possible,