Duo Access Gateway for Windows remains a practical on‑premises SAML 2.0 identity provider for organizations that must host their own SSO front end, but its roadmap, support status, and an imminent certificate authority (CA) bundle change require immediate planning and careful operational work...