While trying to figure out how to delete just the SAML 2 services to
prepare for that, I saw the new fields were added to the DB instead of
being in one of the serialized fields. So this worked, getting me to
defaults:
update regexregisteredservice set
skipGeneratingAssertionNameId=0,skipGeneratingSubjectConfirmationInResponseTo=0,skipGeneratingSubjectConfirmationNotBefore=1,skipGeneratingSubjectConfirmationNotOnOrAfter=0,skipGeneratingSubjectConfirmationRecipient=0,skipGeneratingTransientNameId=0
where metadataLocation is not null;