Force SSO

force sso (single sign on) is a security feature that mandates users log in exclusively through an sso provider, enhancing security and simplifying access it centralizes authentication, reducing the need for passwords while ensuring compliance with organizational policies specific users can be exempted if alternative access is required note when enabling force sso, ensure that the admin is exempted from this setting otherwise, the admin will not be able to log in using credentials in the future, and only sso will be available for authentication if a user attempts to log in using credentials while force sso is enabled, an authentication error will occur enable force sso navigate to session & security → authentication → saml settings toggle on force sso when force sso is enabled at the account level, most users must log in via sso however, specific users can be exempted from this requirement, even if they belong to the same account exempt a user from force sso navigate to users, groups & roles → users click create a new user in the create user window toggle on the exempt force sso option select notify via email to send an email notification behavior when exempting users if the exempt force sso toggle is enabled the admin creating the user receives an email with a password link for the user the password field is disabled by default if you manually set a password, the toggle is enabled automatically if notify via email is toggled off, an email is sent without the password link edit an existing user’s force sso exemption navigate to users , groups & roles → select the desired user in the groups & roles window, toggle on the exempt force sso option go to the password tab and set a password