Yes. SAML users can define specific domains that are allowed to be added to the account as just-in-time (JIT) users.