SAML authenticated accounts tend to be created at first signon (there is no ‘sync’ method as you would find in LDAP authentication).

However, you can create an ordinary Goanywhere authenticated account in advance and assign it features and folders using groups or a template.  If you use the name that would be used during SAML signon, the user will retain all the settings, but things like email address and name will be synced to AD.

The same holds true for LDAP login methods (where used), once the account is created from an LDAP sync, the user can login using the SAML auth method.