Put enforcement policy to optional when SAML domain is verfied

Signed-off-by: Bryan Frimin <bryan@getprobo.com>

pkg/iam/saml_domain_verifier.go

@@ -154,6 +154,7 @@ func (v *SAMLDomainVerifier) tryVerifyDomain(ctx context.Context, configID gid.G
 			now := time.Now()
 			config.DomainVerificationToken = nil
 			config.DomainVerifiedAt = &now
+			config.EnforcementPolicy = coredata.SAMLEnforcementPolicyOptional
 			config.UpdatedAt = now
 
 			scope := coredata.NewScopeFromObjectID(config.OrganizationID)