We should have a `default` case in here too, even if we always fall through to it. Let's not miss a bug where the type isn't `sso_onlogin` for some reason.