Could this "enable single logout" solve my problem? We are also using SAML with Azure. Our GP logs in using the credentials of the logged in user. Drives me scatty when working on a new device that is not yet domain joined; or when logged in with an admin account.