The SSO login is added in addition to the normal login flow.

Accounts generated using SSO (just-in-time provisioning) have no password so login always by SSO will be required if no password is set.

Accounts generated using the normal registration process will be able to use normal login or SSO login.