logger.debug("Initializing {}", this.getClass().getSimpleName());
        }
        ComponentUtil.getSsoManager().register(this);

        // Default SAML settings
        // NOTE: Many security settings are set to false by default for compatibility.
        // For production use, it is STRONGLY RECOMMENDED to enable security features:
        // - onelogin.saml2.security.authnrequest_signed