Avoid IaaS Lock-In with a SAML Proxy
mikehadlow.com