...
It takes up to one minute for change to take effect if you disable it by removing the file and on other cluster nodes if applicable.
Please note Note that only the standard login forms are prevented from username/password login, not the core password/directory system. Username and password login may still be usable through third-party plugins/applications if they run their own password validation.
...
You may also exclude certain of the build-in path prefixes from the above list. Exclusion paths will be evaluated as "starts with". so using * in the end is not neccesary.
...