There is an optional value you can add to your [saml] configuration.
defaultRoleIfMissing = role_name_here
Full details of 'defaultRoleIfMissing' here: (applicable from v6.3+)
http://docs.splunk.com/Documentation/Splunk/6.4.4/Admin/Authenticationconf
... View more