Request SAML Authentication only when required

...lared in the web descriptor