Enterprise SAML SSO is stored as workspace config only. Full SSO login ships after signed ACS + Auth.js session integration.

If the button fails after a hot reload, use this direct Google sign-in link.