Migrate all SAML identities to SCIM identities, when a given
group has a SCIM token present. This also enables the
:scim_identities feature by default.