Enable verbose SSO logs, logout, log in with a user that sends the admin flag in the payload, check logs.