Steps to Reproduce

1. Setup an identity provider (w/ SAML) and link a domain
2. Verify the domain accounts are on the default authentication policy of the identity provider.
3. Un-claim the domain (ie. simulate a problem with the domain verification). The accounts should move to the "Users in local directory" authentication policy. 
4. Reclaim the domain and re-link the domain to the identity provider to recover the SSO settings. 
5. The accounts are not moved and remained on the "Users in local directory" authentication policy. 

Suggestion 

Allow to automatically move the managed accounts to another authentication policy when re-linking a domain