To retain access for bots and service accounts, organization administrators can enable, but not enforce SAML single sign-on for their organization. If you need to enforce SAML single sign-on for your organization, you can create an external identity for the bot or service account with your identity provider (IdP).
Note: If you enforce SAML single sign-on for your organization and do not have external identities set up for bots and service accounts with your IdP, they will be removed from your organization.