Add a new setting, DISABLE_LOCAL_AUTH

and expose it in the settings UI.

awx/ui_next/src/screens/Setting/MiscSystem/MiscSystemDetail/MiscSystemDetail.jsx

@@ -48,6 +48,7 @@ function MiscSystemDetail() {
         'INSIGHTS_TRACKING_STATE',
         'LOGIN_REDIRECT_OVERRIDE',
         'MANAGE_ORGANIZATION_AUTH',
+        'DISABLE_LOCAL_AUTH',
         'OAUTH2_PROVIDER',
         'ORG_ADMINS_CAN_SEE_ALL_USERS',
         'REDHAT_PASSWORD',

awx/ui_next/src/screens/Setting/MiscSystem/MiscSystemDetail/MiscSystemDetail.test.jsx

@@ -30,6 +30,7 @@ describe('<MiscSystemDetail />', () => {
         INSIGHTS_TRACKING_STATE: false,
         LOGIN_REDIRECT_OVERRIDE: 'https://redirect.com',
         MANAGE_ORGANIZATION_AUTH: true,
+        DISABLE_LOCAL_AUTH: false,
         OAUTH2_PROVIDER: {
           ACCESS_TOKEN_EXPIRE_SECONDS: 1,
           AUTHORIZATION_CODE_EXPIRE_SECONDS: 2,

awx/ui_next/src/screens/Setting/MiscSystem/MiscSystemEdit/MiscSystemEdit.jsx

@@ -48,6 +48,7 @@ function MiscSystemEdit() {
         'INSIGHTS_TRACKING_STATE',
         'LOGIN_REDIRECT_OVERRIDE',
         'MANAGE_ORGANIZATION_AUTH',
+        'DISABLE_LOCAL_AUTH',
         'OAUTH2_PROVIDER',
         'ORG_ADMINS_CAN_SEE_ALL_USERS',
         'REDHAT_PASSWORD',
@@ -261,6 +262,10 @@ function MiscSystemEdit() {
                     name="MANAGE_ORGANIZATION_AUTH"
                     config={system.MANAGE_ORGANIZATION_AUTH}
                   />
+                  <BooleanField
+                    name="DISABLE_LOCAL_AUTH"
+                    config={system.DISABLE_LOCAL_AUTH}
+                  />
                   <InputField
                     name="SESSION_COOKIE_AGE"
                     config={system.SESSION_COOKIE_AGE}

awx/ui_next/src/screens/Setting/MiscSystem/MiscSystemEdit/MiscSystemEdit.test.jsx

@@ -31,6 +31,7 @@ const systemData = {
   INSIGHTS_TRACKING_STATE: false,
   LOGIN_REDIRECT_OVERRIDE: '',
   MANAGE_ORGANIZATION_AUTH: true,
+  DISABLE_LOCAL_AUTH: false,
   OAUTH2_PROVIDER: {
     ACCESS_TOKEN_EXPIRE_SECONDS: 31536000000,
     AUTHORIZATION_CODE_EXPIRE_SECONDS: 600,

awx/ui_next/src/screens/Setting/shared/data.allSettingOptions.json

@@ -34,6 +34,14 @@
               "category_slug": "system",
               "defined_in_file": false
           },
+          "DISABLE_LOCAL_AUTH": {
+              "type": "boolean",
+              "label": "Disable the built-in authentication system",
+              "help_text": "Controls whether users are prevented from using the built-in authentication system. You probably want to do this if you are using an LDAP or SAML integration.",
+              "category": "Authentication",
+              "category_slug": "authentication",
+              "defined_in_file": false
+          },
           "TOWER_URL_BASE": {
               "type": "string",
               "label": "Base URL of the service",
@@ -2959,6 +2967,15 @@
               "category_slug": "system",
               "default": true
           },
+          "DISABLE_LOCAL_AUTH": {
+              "type": "boolean",
+              "required": true,
+              "label": "Disable the built-in authentication system",
+              "help_text": "Controls whether users are prevented from using the built-in authentication system. You probably want to do this if you are using an LDAP or SAML integration.",
+              "category": "Authentication",
+              "category_slug": "authentication",
+              "default": false
+          },
           "TOWER_URL_BASE": {
               "type": "string",
               "required": true,

awx/ui_next/src/screens/Setting/shared/data.allSettings.json

@@ -3,6 +3,7 @@
   "ACTIVITY_STREAM_ENABLED_FOR_INVENTORY_SYNC":false,
   "ORG_ADMINS_CAN_SEE_ALL_USERS":true,
   "MANAGE_ORGANIZATION_AUTH":true,
+  "DISABLE_LOCAL_AUTH":false,
   "TOWER_URL_BASE":"https://localhost:3000",
   "REMOTE_HOST_HEADERS":["REMOTE_ADDR","REMOTE_HOST"],
   "PROXY_IP_ALLOWED_LIST":[],