For those who would like to see the message you need to be logged in to see:
(originally posted by a helpful gent on reddit)
Personally, given this massive ballsup and the fact that they have had problems before:
I would personally suggest adding some steps on to the guide.
12. Stop using OneLogin, start protecting your indentity management data.
13. Block all corporate access to OneLogin, in case anyone ever has the thought to use again in the future.