I’ve done a few of these and thought that I would note some of the gotchas I experienced.
Just to be clear, an IDP is an Identity Provider.
This is the other side of my previous post: