Only users assigned to the Splunk AppDynamics role Account Owner can configure SAML authentication in the Controller and assign other users to the Account Owner role. Roles govern user privileges in the Controller. See Manage Custom Roles for Splunk AppDynamics.