code: function (err, ok, state) {
          if (err) { return self.error(err); }
          if (!ok) { return self.fail(state, 403); }
  
          if (self._jwt) {
            self._authenticate_jwt(req, state);
          } else {
            self._authenticate_saml(req, state);
          }
        }
docs: We have a response, get the user identity out of it