My domain is required, as the authentication part is an application of the SP-initiated SAML flow Salesforce Layered Flows
