Admin SSO: Source is not used, all SSO User are ADMIN

[BiasF]

Describe the bug
If you configure SSO with SAML for Admin login with a AD Source as source, the user can login and get full admin rights even if the source won't match.
The same user is not able to login with username and password directly.

For example:

This rule match for the LDAP user and the user can login.
If I disable the rule, login via LDAP (Username + PW) is not possible anymore, but login via SSO is still possible.
You can delete the user tob70778 from PF, but he can still login via SSO (and is not recreated)

Source is selected in SAML Source.

SAML Source is selected in Connection Profile.