What functionality would be lost if you configure only SAML as compared to SAML and LDAP?