Preventing a user from logging in to AAP via SAML authentication

Issue

• Users who are not mapped to a group are still able to log in, although they have access to nothing;
• I want to prevent users from being able to log in via SAML;