A better and cheaper alternative is combining Google Workspace and AccessOwl. Google Workspace serves as the identity provider, while AccessOwl handles SaaS access and user-lifecycle management without relying on SAML or SCIM, thus avoiding the SSO Tax.