Group Policy can require active SAML SSO session for web access

See merge request gitlab-org/gitlab-ee!10034