District admins should have a way to set the "Allow SSO feature" to be turned on for all web rules in the district, so every teacher doesn't have to manually turn it on.