CHW-4714 SAMLProviderMismatch

the configured SSO provider for this organization is not SAML; use the OIDC metadata endpoint instead

Default message: the configured SSO provider for this organization is not SAML; use the OIDC metadata endpoint instead
HTTP status: 400 (client)

Problem. /api/auth/saml/metadata/{slug} returned 400 for a configured org. Cause. The org’s SSO provider uses OIDC, not SAML; this endpoint only serves SAML SP metadata. Fix. OIDC providers do not consume an SP metadata document — skip this endpoint and configure the IdP with the issuer_url / client_id pair directly. HTTP 400.