Allow administrators to conditionally or globally require auth via OneLogin

For Drupal sites that are essentially built as Intranets or internal portals, a global checkbox to require authentication via OneLogin would be extremely convenient.

Otherwise, a context reaction where this could be configured by path (for example) would be handy. Soft dependency on Context, in that case.