SP not IDP login

Author: clairekinde11

src/content/docs/authenticate/enterprise-connections/about-enterprise-connections.mdx

@@ -80,6 +80,11 @@ If you would prefer users explicitly choose to sign in with SSO, you can add a u
 
 Users click the universal button, enter their credentials, and get routed silently to the IdP for verification. 
 
+## Enterprise connections only allow service provider log in, not identity provider log in
+
+If you run a B2B business, you might allow your business customers to use their own identity provider setup (like Okta SAML) to access your app. When you set up an enterprise connection to support this, make them aware they can only sign in via your app's auth gateway, with Kinde as the auth service provider.
+The customer cannot sign in to your app via their own connection setup - also known as IdP-initiated login.
+
 ## Disable an enterprise connection
 
 <Aside type="danger">