They are not. I agree. SSO isn't where to try to bleed that pig though, I think, to the point where for team-based systems it is probably more proper to disall

They are not. I agree. SSO isn't where to try to bleed that pig though, I think, to the point where for team-based systems it is probably more proper to disallow anything else (and maybe make them pay for guest access outside of their domain!).