Resolve enforce SSO-Only Authentication is blocking PAT use for APIs

Changelog: fixed

ee/changelogs/unreleased/pat_error.yml

+---
+title: Fix error caused by enforcing SSO-Only Authentication for Git Activity for PAT tokens
+merge_request: 61348
+author:
+type: fixed

ee/lib/gitlab/auth/group_saml/session_enforcer.rb

@@ -51,6 +51,7 @@ module Gitlab
         end
 
         def user_allowed?
+          return true if user.bot?
           return true if user.auditor? || user.can_read_all_resources?
           return true if group.owned_by?(user)
 

ee/spec/lib/gitlab/auth/group_saml/session_enforcer_spec.rb

@@ -150,6 +150,12 @@ RSpec.describe Gitlab::Auth::GroupSaml::SessionEnforcer do
 
           it { is_expected.to be_falsey }
         end
+
+        context 'with project bot' do
+          let(:user) { create(:user, :project_bot) }
+
+          it { is_expected.to be_falsey }
+        end
       end
     end