Only admin users are able to turn on/off single sign-on(SSO).