Login Config

Public login-page bootstrap config — deliberately unauthenticated.

The frontend must decide which login experience to mount (SSO route tree vs email/password form) before any session exists, so this cannot sit behind has_token like /tenant-info. It exposes a single bit: ssoLoginEnabled True means this login host uses SSO; False means no server-side opinion, and the frontend falls back to its baked-in SSO_ENABLED allowlist (legacy behaviour). The flag is therefore additive — it can turn SSO on for a host, never off if already in frontend allowList.