I was able to authenticate through Contact Center Express (and Active Directory SAML) for a custom app using the SDK and documentation.
https://developer.cisco.com/docs/contact-center-express/#!cisco-identity-service-client-sdk-guide/during-agent-log...