I prefer saml 2.0 for jit provisioning.