Should consider security options during implementation to provide the most secure default possible (i.e. SAML w/SCIM vs OIDC).

[corang]

Should we default to saml instead of OIDC? How good is the jenkins saml plugin vs what we have now?