We’re planning to update our identity provider configuration and want to validate the SAML attribute mappings before rolling it out.
How do you test changes without disrupting existing users? Are there specific edge cases you check around session expiry, missing attributes, or users assigned to multiple groups?