It would be great if we could have more granularity with SSO rules instead of just applying them universally. Having something like an SSO admin account that can log in with credentials and set SSO to test mode when an identity provider outage happens would be ideal. Right now the only option to recover login access when an identity provider outage occurs is to submit a support ticket and hope for a timely response.