CHW-1113 SSOPlanDowngraded

SSO is not included in this organization's current plan; contact an administrator

Default message: SSO is not included in this organization’s current plan; contact an administrator
HTTP status: 403 (client)

Problem. SSO is configured for the org but the plan that granted the sso feature has since been downgraded. Cause. Plan feature check failed during the callback — the configured provider remains intact but minting new SSO sessions is blocked. Fix. Upgrade the org’s plan, or disable SSO in the settings UI to let users fall back to password auth. HTTP 403.