binding to saml enabaled VS still has to be done manually on each NS, but you can deploy the policy in a single action with config job