AuthN by PingFederate; authorization via users.json (no DB).
users.json
SP-initiated Login SP Metadata View Session (JSON) Clear Session
—