* saml.default.groups=user
 * saml.default.roles=user
 * </pre>
 *
 * <h2>Security Settings (Production)</h2>
 * <p>For production environments, consider enabling these security features:</p>
 * <pre>
 * saml.security.authnrequest_signed=true
 * saml.security.want_messages_signed=true
 * saml.security.want_assertions_signed=true
 * </pre>
 *

                logger.debug("jwtClaim={}", jwtClaim);
                logger.debug("jwtSignature={}", jwtSignature);
            }

            // SECURITY WARNING: JWT signature validation is not implemented.
            // This is a critical security vulnerability. The ID token should be validated
            // to ensure it was issued by the expected OpenID Connect provider and has not been tampered with.