3.1 Disabling Unused Authentication Protocols

You must disable any authentication protocol that is not in use. Enabling additional protocols increases the attack surface area.

Go to Devices > Identity Servers > Edit and ensure that you deselect any unused protocol from the list under Enabled Protocols.