SAML outside the browser