Allow Setup Key in conjunction with SSO for peers

Is your feature request related to a problem? Please describe.
I like that SSO login with a user auto propagates to the peer, however this restricts groups being auto-added to a device because it was not logged in with a setup key.

Describe the solution you’d like
Allow managed devices to either use setup keys and SSO or allow SSO devices to be auto-added to groups. I think IDP synced devcie groups would work better however.

Describe alternatives you’ve considered
Have to manually add each SSO peer to a Group currently.

Additional context
Add any other context or screenshots about the feature request here.