I currently have a Tenant for all my customers to access their Managed Services though Azure Active Directory. I know there is a way to use Saml to bring in the normal users but is there a way to allow Customer only users to use SAML too? or truly is it the same thing they just need the role?