APM server SSO with SAML

I have a mobile application that can only authenticate users via SAML -- not Kerberos or trusted HTTP headers. I want to protect it behind APM, with an access policy to pre-authenticate the user bef...