I have configured SAML SSO with G Suite as my idP . This works fine.
BUT users can still navigate to /login/normal, and login with a uname/pwd. if they have no password, they can hit 'Forgot Password' and are sent a reset link where they can set a password.
The purpose of SSO is to centrally manage accounts and authentication.
There is no point if users can simple go AROUND the idP and generate their own login credentials.
Is it possible to DISABLE normal login when SSO is active?

