always ask whether to do SAML login on "configure"