In Admin portal -> Account settings -> SSO Integrations there is this option:
"Enforce SSO for all users of this account."
When it is enabled, username/password fields are hidden from the login page, and only SSO auth button("Authenticate through $SSO Name") is left.
To provide seamless user experience, 3Scale should automatically redirect unauthenticated user to the enforced SSO.
This should only happen if only one SSO integration is configured.
We need to check how this would work with different flows