This has now been added as an option in the plugin’s SSO Provider settings. Thanks for the suggestion!