saml.swancreate.com — multi-tenant SAML SP.
Admin UI: /admin
District handover (public): /handover/:prefix
Per-tenant endpoints: /auth/saml/:prefix/{login,acs,metadata,health}