A simple outline how to expose a single page for the purpose of a private-site running SAML/SSO, where all pages are typically private, but you need one to be available without SSO, beside the login page.
If your site is getting spam, you can enable the "Captcha" module, which will allow you to set up the typical challenge-response test of jumbled letters. This prevents automated spam tools from submitting.