Restrict SAML logout request when new user provisioning is not enabled