Keycloak is a very popular SAML provider but we haven’t documented how to set one up. So to that end I created a Vagrant machine that spins up Mattermost with LDAP and Keycloak SAML configured. Keycloak also has a group for guests that are configured to create guest accounts in Mattermost.
My next step is to add encryption and key verification for the whole thing, along with a handful of other minor improvements.
If you have any questions let me know!