Currently we have to remove the existing SSO configuration before we can setup a second one. This is less than ideal if you are switching identity providers.

1) Allow us the ability to create a second SSO connection in an inactive state.

2) We should be able to test the new SSO configuration while it is in an inactive.

3) Allow use to set the second SSO configuration as active only after the original has been set to inactive.

4) Allow the original SSO configuration to remain inactive for 5 days, then prompt for deletion

This will make switching from one identity provider to another with minimal down time, perhaps allowing it to coincide with a maintenance window.