I need to generate a SAML Assertion from NetSuite which will be Posted to a 3rd party service provider to retrieve a Bearer token. I believe an identity authority (eg Ping, auth0) can return this via web service call but I am hoping to build the assertion without using an authority, perhaps using the Crypto module. Are either of these approaches viable? Any other approaches, thoughts, or experience? thx