We plan to add SAML SSO via the staging IdP at staging.halcyon-deploy.example. Not yet implemented; the subdomain is a placeholder.