SamlProvider defaults to enabled, validates fields, can create/update, displays info to user
SamlProvider requires top level group
License and policy checks for SamlProvidersController