When displaying the login page on behalf of a service
that is not allowed to use SSO, the "disable SSO"
check box should be removed or disabled ("grayed
out"), possibly with a message instead stating that
this service is not allowed to use SSO.
This to eliminate confusion as to when SSO is active.