Having options for increased authentication security is greatly appreciated, and for our organization, is basically a hard requirement for IT systems (and is used everywhere else if at all possible).

Having support for SAML in SimpleMDM would significantly increase our interest in using it. Anything that allows you to control company-owned devices should be extremely secure - SAML lets us use our own Identity Provider and control general access, login policies, multifactor requirements, and more.

Preferably, the implementation would allow for JIT user creation, or even better, user creation & deactivation provisioning options (preferably via SCIM).

For reference, we use Okta as our IdP. My opinion is that it's best to focus on the core SAML and SCIM functionality instead of vendor-specific APIs, as all major IdP vendors use SAML SCIM. This would allow for auth via Okta, Ping, OneLogin, ADFS, Centrify, many more etc.