Use `with_saml_identity=true` param to filter out
members without saml identity linked. You'll
have to have access to read group saml identities
to use this filter