Use Edge Session for authentication on SAML IdP Virtual Server

I'm running APM for different use cases. One use case is connecting mobile devices with Edge Client. They authenticate with user based certificates. On the same box, I have another APM access profile running that does SAML authentication and provides an IDP service. I now want that Edge Client connected users don't need to authenticate a second time, meaning that the SAML IDP access profile leverages the authentication information we already received when authenticating the user with Edge Client.

Has anybody implemented a good approach for that?

Thanks in advance for your support.