It would be good to have an SSO failover URL made available.

Only Administrators should be able to login via this URL using their 6clicks username, password, and MFA, and can be used to recover access if there is a problem with SSO or the iDP.