Before I go down a Rabbit Hole, is SAML allowing you to not pre-add
administrators? Any chance you are working with Duo? I'm also assuming
you are referring to this
article.https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-SAML-SS...
FortiCloud is still free, although they are killing a bunch of free
features. We are fighting FortiGate on TOTP issues, but other than that,
we have probably 100 working great. Be sure to get the multi-tenant
license.