A customer would like to use an identity provider for connecting an external identity to Sourcegraph for repo syncing purposes, but they don't want users to be able to authenticate using that provider. We should provide an option for that.