Q1
Single choice
Which is a / are best-practice(s) in a SAML 2.0 situation?
Solution: To never enable SAML for all your end-users