If no SSO is specified, go to front page.
Include SAML IdP urls.
Fetch user email address from custom model.
Show meaningful error page for missing attributes.