SAML Group Sync should always be executed whenever SAML Group Links
exist. This ensures a user is removed from groups even if SAML
doesn't send any group names, or when group names do not match
any SAML Group Links.

Changelog: fixed
EE: true