enable login via shib and also enrollment restriction