The Security > Manage SAML Authentication permission is required to access the SAML Administration tool. Once the Manage SAML Authentication permission is enabled, the SAML Administration tool is visible under Admin Tools > Security.
The Security > Manage SAML JIT Provisioning Configurations permission is required to manage SAML JIT Provisioning Configurations within SAML Administration.
The Custom Reporting Framework > Can see data hub permission is required to see Data Hub for the JIT Provisioned Users Log.