My domain is required, as the authentication part is an application of the SP-initiated SAML flow Tag Salesforce Layered Flows
