System configuration and upcoming IAM controls.
Backed by API config storage. Validation is enforced when enabling SAML.