The interface for secondary admin accounts is extremely confusing. It should at minimum have the SSO section disabled with a note explaining that only the primary admin account can modify it, or even better display the settings but greyed out. Having an active button to initiate SSO configuration for an organization that already has SSO enabled made me worry that SSO had broken in some way, or that our Box configuration was in an inconsistent/unstable state at risk of breaking if I made any changes.