These have not been tested with the unique requirements of per-group SAML
and have not yet been verified for security

In particular, these will likely allow someone to determine
if a group exists or not by guessing the name.