SDK: Add support for allowedLoginMethod

[pujal0909]

What It Does

As an administrator of Team Config files at my site, I would like the ability to indicate which authentication principals users should be prompted to submit when they're logging into services so they are are entering the credentials which are compliant with my site requirements and backend configuration.

• Added a new property to Team Config as a sibling of authOrder that will allow users to set a preferred login method (allowedLoginMethod)
• Added AuthOrder to team config schema
• Included changelog to rebuild schema after these updates
• Updated isUsingApiml() and added getApimlDecision following design doc spec to the SDKallowedLoginMethod is the first conditional / check within the getApimlDecision heuristic
• Anywhere SSO/non-SSO is checked within the SDKs, switched to isUsingApiml.

How to Test

See each scenario listed pass in unit tests

Review Checklist
I certify that I have:

• updated the changelog
• manually tested my changes
• added/updated automated unit/integration tests
• created/ran system tests (provide build number if applicable)
• followed the contribution guidelines

Additional Comments

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.19%. Comparing base (64c2bfc) to head (ffd85d9).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #2895   +/-   ##
=======================================
  Coverage   92.18%   92.19%           
=======================================
  Files         657      658    +1     
  Lines       20610    20636   +26     
  Branches     4570     4574    +4     
=======================================
+ Hits        18999    19025   +26     
  Misses       1607     1607           
  Partials        4        4           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Client artifacts:

• CLI: https://github.com/zowe/zowe-cli/actions/runs/35232862520/artifacts/10502527207

[github-actions]

📅 Suggested merge-by date: 9/30/2026

[traeok]

Thanks for working on this Pujal! I think the snapshots are failing due to a merge commit that left behind conflict markers across multiple files. See my comment below.

[anaxceron]

Requesting some minor edits

[traeok]

Kicked off a round of system tests for your PR, job number 2656 👍

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Requested changes have been implemented; system tests in job 2656 are all passing

[traeok]

Thanks for working on this Pujal! I left a suggestion but it may be out of scope - I noticed the definition for authOrder was just added so I wanted to mention it while those changes were new. Aside from that, I think the changes should be good to merge

[traeok]

I like that we provide the allowable values and an explanation of the default for the new allowedLoginMethod option. In a similar fashion, should we provide the allowed values in this description of authOrder for clarity?

[traeok]

(nitpick) space missing between header and entry