SSO-Only Authentication Enforcement
SSO-Only enforcement requires every member to sign in through your configured SSO provider.
Prerequisites
SSO integration configured
Your workspace has an active SSO connection. At least one provider (e.g. Okta, Google, Azure AD) must be enabled.
Admin role required
Only workspace admins can toggle SSO-Only enforcement. Ensure you have the right permissions before proceeding.
Members notified
Tell your team before enabling this. Members who try email and password afterward will be redirected to SSO login.
Enable SSO-Only authentication
1
Open Workspace Settings
Go to Admin Panel → Workspace Settings.
2
Enable the SSO-Only toggle
Turn on Enforce SSO-Only Authentication.
This takes effect immediately. Email and password fields are disabled for all members as soon as you confirm.
3
Verify enforcement
Confirm that SSO-Only mode is active.
Member experience after enforcement
When SSO-Only is enabled, the login experience changes for everyone, if a member tries to enter an email and password, the fields won’t accept input and a message explains that SSO is required. They’re guided to the SSO login option. Members without an SSO-linked account should contact their admin to get set up with the identity provider.
Disable SSO-Only authentication
To allow both email/password and SSO again, follow the same steps and toggle Enforce SSO-Only Authentication off. Email and password login is re-enabled for all members immediately.
Disabling this setting doesn’t affect your SSO configuration members can keep using SSO alongside email and password.
FAQ
What happens to members who only use email and password?
What happens to members who only use email and password?
They lose the ability to sign in with email and password as soon as SSO-Only mode is enabled. Ensure all members have valid accounts with the configured SSO provider first.
Can I exclude specific members?
Can I exclude specific members?
No, enforcement applies to all members uniformly, with no per-member override. If you need mixed authentication, keep enforcement disabled.
What if our SSO provider goes down?
What if our SSO provider goes down?
If your provider is unavailable while SSO-Only is enforced, members can't log in until it's restored. Plan for SSO downtime contingencies with your identity provider team.
On this page
- SSO-Only Authentication Enforcement