I think you could use the https 5555 port for SAML. It doesn’t need to be the default port
You cannot disable local user management. That would be undesirable. You need to have to have at least one local account available to login in case central user management isn’t working.
From a security perspective, if you are using central user management I recommend disabling all the predefined users except Administrator. Give that one a very strong password and store it somewhere secure.
#webMethods#Integration-Server-and-ESB