Currently, if a GitLab.com group's subscription expires (changes
to Free/No Plan or a tier where Group SAML is not available) and
they have SSO enforcement turned on, users will lose access to their
group. This change automatically turns off enforced SSO when the
SSO feature is no longer available to the group.