saml_base must be a subpath of saml_auth in client installer