What purpose does testing the noAuthTestUser have? It seems like this should already be covered in other tests. Is the noAuthTestUser on the same domain as the disabled IdP from above? If so, that makes sense, if not it seems like this can be safely removed as test duplication.