There are 4 zones where message traffic is managed. The policies in these regions are given below.
Client -> Gateway
Gateway -> API
API -> Gateway
Gateway -> Client
SAML Validation policy can only add to SOAP Gateways.