The SAML 2.0 IdP cache is always empty after startup, and populated either:
- when new IdP is imported
- when IdP is updated
- when SAML2IdPService#list is invoked via REST (for example, from Admin Console's or Enduser UI's login forms)
The SAML2SPLoader can be leveraged for initial cache population upon startup.