Why can't I enforce SSO only in my Panther Console?

Issue

Why can't I enforce SSO only in my Panther Console? I see an error that says:

You must be signed in as a Single Sign On (SSO) user with the Admin role assigned to modify this feature.

Resolution

Make sure you are signed in as an SSO user with the "Admin" role.

Note that an "Admin (SAML)" role would not be able to enforce SSO only. 

Cause

This can happen if you are not signed in as an SSO user with the Admin role. If Enforce Single Sign On (SSO) is enabled, at least one IdP-managed user must also have the Admin role, in addition to at least one password-based user with the Admin role.