How would that work? If they aren’t logged in, how could it be a per user option?
I suppose you could have a plugin that would refuse to log them in if the user was on a certain group and hadn’t used saml. I’m thinking 2 to 4 hours work? Maybe more with proper specs. But I haven’t looked. You could ask in Marketplace if you have a budget.