Do not allow a deactivated user to login via SSO.