When I really dove into it, I understood mostly why all the complexity was all there if I cared about data at the identity provider.

When it’s only used for SSO, it’s extreme overkill.