While evaluating an on-premises install of Sentry, I looked at both LDAP and Otka SSO.
However once the SSO is setup there was no way to use LDAP.
This introduces a single failure point in the auth, if the provider is off-line.
Is there a way to offer multiple authentication options?