Trouble setting up Vaultwarden with Authentik

I’ve been spending quite a lot of time at this point trying to get a Vaultwarden setup with SSO via Authentik on NixOS. I think I almost have it working but now the SSO login is asking for an SSO identifier (and on mobile, an “Organization ID”) which there is no mention of in the vaultwarden.env template. There does seem to be documentation to set the SSO Identifier over on the bitwarden side of things but the vaultwarden admin interface seems to shares little in common with that documentation...