Allow SAML to identify external users and set them as such
Related to #4009 (closed)
Fixes #14577 (closed)
This allows SAML to retrieve group information form the SAML Response
and match that
to a setting that will flag all matching users as external.