This PR migrates the SAML configuration from the Controller to the Gateway, it intentionally skips setting the CALLBACK_URL so that the Gateway can fill in the appropriate URL.