I'm a SAML newbie, working on setting up SAML SSO for HelpScout using the saml2-js package. My app will be serving as its own identity provider.
If a user on my site wants to log in to HelpScout, do I a) send them to a HelpScout URL (if so which one?) or b) hit a HelpScout API endpoint (if so which one?)