Browser for now, because native CWA is not working reliable for SAML use cases and needs nFactor, which isn't part of the Gateway license