SAML JIT and Admin account

[ZabbixSeeker]

Am I reading this right? From Zabbix DOC:
"If SAML authentication is enabled, users will be able to choose between logging in locally or via SAML single sign-on. If JIT provisioning is used, then only single sign-on is possible.".

So, if I enable JIT which kind of is reasonable, then the local Admin account cannot be used (unless it's in the AD). So if AD or the internet connection goes down, you lock out the Admin account?

Question: what is the point of locking out the Admin acount?

[ZabbixSeeker]

To put it in other words: whole Zabbix breaks, nobody can use it, even if there's a local admin account. Game over, or you'll have to hack the database.

What is the point of this feature? Never heard of a feature that blocks all users from logging in, including the Admin, before. You won't even be able to login and troubleshoot and fix the issue.