An Experience Cloud site needs to allow customers to log in using a corporate SAML IdP. The customers already have Contact records in Salesforce. How should the user/contact model be configured for this scenario?