Note: The user cannot be authenticated, and a SAML response cannot be sent, until a SAML request is received from the service provider.