CHW-4714 SAMLProviderMismatch
the configured SSO provider for this organization is not SAML; use the OIDC metadata endpoint instead
Default message: the configured SSO provider for this organization is not SAML; use the OIDC metadata endpoint instead
HTTP status:400(client)
Problem. /api/auth/saml/metadata/{slug} returned 400 for a
configured org. Cause. The org’s SSO provider uses OIDC, not SAML;
this endpoint only serves SAML SP metadata. Fix. OIDC providers do
not consume an SP metadata document — skip this endpoint and configure
the IdP with the issuer_url / client_id pair directly. HTTP 400.