It would be great to add the following. Add a portal SSO setting, enforce single sign on, but also add the ability for individual users to be exempt from enforced SSO.
Increased security for SSO users but with flexibility to exempt certain users from enforced single sign on.