Why try to implement SAML yourself when you could more simply integrate with something like Office 365 with OAuth and let them do the SAML integration with the customers Idm system?
the key word is "like". I certainly wouldn't mandate moving the customer to 365 just for this. But chances are they are already using something "like" Office 365 or Google and have already done the Idm integration.