Add check for org SM flag in client store (#3007)

src/Identity/IdentityServer/ClientStore.cs

@@ -96,6 +96,17 @@ public class ClientStore : IClientStore
             return null;
         }
 
+        switch (apiKey)
+        {
+            case ServiceAccountApiKeyDetails key:
+                var org = await _organizationRepository.GetByIdAsync(key.ServiceAccountOrganizationId);
+                if (!org.UseSecretsManager)
+                {
+                    return null;
+                }
+                break;
+        }
+
         var client = new Client
         {
             ClientId = clientId,