Ensured that the SAMLAuthenticator only enriches the Principal with groups - and therefore is dependent on an external OpenConextOAuthClient - if the api-enrich-principal property in surfconext.authn.properties is set to true