OAuth 2.0 SAML Bearer for SAP User Propagation with practical guidance on architecture, identity mapping, security controls, rollout and Cygnivo GUI SSO.