Hello, is ARS supporting SAML token for delegations or can it only be used for ARS website access?

We continue to see the error described here support.oneidentity.com/.../error-unable-to-uniquely-identify-the-user-using-provided-claims-federation-authentication-with-azure-ad

Our on-prem UPN and AzureAD UPN are different, so we are using the feature…

Recently we configured our dev ARS 7.4 environment with SAML pointing at AzureAD.  We followed the instructions in Active Roles 7.4 Administration guide, creating an App Pool service domain account with kerberos constrained delegation with the required…