Add an "Enabled" option in config which when not-present defaults to true. When set to false, it disables the SSO login