Single Sign On EpiServer options?

Hi,

I'm completely new to EpiServer however I would like to start to evaluate what options around Single Sign On are available?

I'm keen to offer my internal users (line of business) authors and admins a Single Sign On experience via SAML (specifically using OKTA), and managing their roles via claims approach perhaps via SAML2.

For the consumption side of the experience I also have a need to offer Single Sign On however I'm considering AzureAD here since we have multiple other Saas like applications in our estate.

Thanks

PG