I installed a fresh version of Jenkins to test if I could use Azure AD with it. I installed the package on a brand new Azure VM. I installed the SAML 2.0 plug-in, input the metadata document from my IdP, and set the authentication to use "Logged-in users can do anything". I saved. I refreshed. I clicked "Log In", authenticated with Azure AD, and then it returned to Jenkins. I can do everything just fine. The problem is that my user ID is a bunch of random letters and numbers. I can't change it.

NOTE: Put this into core because there is no saml-plugin component.