SSO enforcement

Organizations can now enforce SSO authentication. When enabled, members must verify their identity with the configured SSO provider before accessing organization resources. Users can still log in normally, but will be redirected to SSO when accessing an enforced organization.