Review docs describing GroupSAML NameID requirements