When using SSO in various forms it would be nice to have the option of forcing patrons to use the external auth and removing the ability to sign in to koha directly. It would be nice to have separate switches for the staff client and OPAC so that staff could be allowed to access directly while patrons are directed to SSO
*** This bug has been marked as a duplicate of bug 18506 ***
I'd say this is more a duplicate of bug 28093 than it is of the original shibOnly introduction. Now I understand the use cases around all this a bit better I wish I'd named that preference differently.. it's more of a shibboleth/saml auto forward.. yes the effect is the same but the approach could differ. With the option to hide local login one could allow for shib with a fallback to LDAP and prevent local.. for example.
*** This bug has been marked as a duplicate of bug 28093 ***