that is because oauth, oidc, and saml fall under the category "webshit" that doesn't matter, there are also thousands of C++ programmers who cannot explain the latest reactular .js and other bullshit the script kiddies continue to pump from their collective anus
Are you ok there? SAML, OIDC and a depressingly long tail of Kerberos is how modern enterprise identity security works.