Can it? In many SAML setups, there's not direct network interaction between the IDP and Service, other than at most sharing metadata via URL.