Well, I'am having the same issue with our SaaS system. We already have a SaaS running on web and Android and we require user login so they can access their data and Apple is rejecting the app. I think we will have to surrender and create a "Guest login" button that will delete all data on user logout. I don't think this makes sense in a SaaS platform, but I suppose this is the only way to go.