Something that seems to be missing from the Business SSO sections is SCIM/Provisioning integration for the SSO apps. It would be nice to be able to utilize the SCIM APIs that SAML capable apps provide to automatically setup, authorize the proper permissions in APP that aren't done with SAML, and to deactivate or delete accounts that are no longer authorized for a specific application.