This change adds a new configuration toggle for SAML integration to

allow turning off automatic user provisioning. When we first implemented

SSO via SAML, our expectation is that application entitlement would be

managed entirely via the IdP, but that's not always the case. This

change makes it so admins can disable user provisioning during the SAML

authentication flow, allowing them to manage users through other means.
This also fixes up an incorrectly copy/pasted label in the

authentication settings form.

Ran unit tests.
Verified that the new setting correctly disabled user provisioning.