...
That just runs the SAML flow and lets the success or failure of that produce the outcome.
Conditional by Service
This is an extremely variable sort of use case, but here are a couple of example strategies. One is suitable for simple testing by a few people in a relatively static group, and the other provides for a more general sort of approach that can scale much better.
Static Group
For basic testing, you can define a list of SPs for which the SAML flow should be used, with everything else using Password (or, again, whatever you’re already doing). Using this strategy to leverage the RelyingParty layer allows this list to be adjusted and reloaded via that service.
...