A Terraform Cloud SAML session validates and remote applies still fail

SAML-backed remote applies fail only after identity redirects are consolidated onto a new callback domain.