The Require SSO login toggle lets admins enforce SSO-only authentication for individual users. When enabled for a user, their password login is removed and they must sign in through your company's SSO connection.
Before you begin
SSO must be configured for the user's company before this toggle is available. See Configure SSO for your company.
Who can use this feature:
System Admins can manage SSO login enforcement for users on a firm-configured SSO connection, but can't manage enforcement for client-configured connections.
Client Admins can manage SSO login enforcement for users on a client-configured SSO connection, but can't manage enforcement for firm-configured connections.
Require SSO login for a user
To require SSO login for a user, follow these steps:
Go to Admin > Users and open the user's profile.
In the Authentication & Password section, turn on the Require SSO login toggle.
When you enable the toggle:
The user's password login is removed. They'll need to sign in using your company's SSO Login URL going forward.
If the user hasn't verified their email yet, a new invitation email is sent to them automatically.
Turn off the SSO requirement
To allow a user to log in with email/password instead of (or in addition to) SSO, follow these steps:
Go to Admin > Users and open the user's profile.
In the Authentication section, turn off the Require SSO login toggle.
With the toggle off, the user can log in with their email and password or through SSO if it's configured for their company.