Looking for a SAML 2.0 SSO implmentation for Fiori apps with ADS.

I want to initiate a SSO for an Internal User. The user wants to Directly access the fiori app with out any additional Login via clicking the link in the mail for the given fiori app.

The idea is we have a very limited budget. Hence would like to know if its possible to implement SSO for Fiori through SAML without incurring any major cost