Good to know (response from NS support): "Enabling both Open ID Connect and SAML Single Sign On is possible on an account. However, both of this authentication methods cannot be used on the same role. You must create 2 separate roles, one with the OIDC permission and one with the SAML permission"