Default = True
If you are implementing security in a way that allows anonymous users, by default, the SSO logic will ignore new connections by these users, which will have their IP Address as the user displayed in the Administration Console. The SAML 2.0 allows anonymous connections in support of customers that are transitioning to the use of an identity provider and do not or cannot force all users to switch in one day.
If you would like to still run the SSO script for anonymous users based on their IP address, set this to "false" or "no". Be aware that in many environments, a user's IP address is not unique due to router NAT functions and other network alterations and thus can be a poor index / key for managing host credentials!
