Usually with saml you are still integrating with LDAP for the user imports, especially since the IdP is typically also using that LDAP for the actual authentication.

Whether you can create the user from the IDP response depends upon whether there is enough info to satisfy Liferay's required fields (screen name, email address, first and last names).