SSO cannot be required through a connection that is not active: nobody at the domain could sign in
set_sso_policy
