Enforce single sign-on

SSO must be enabled before it can be enforced. While SSO is enabled (but not yet enforced), you can selectively require it for specific users. Once SSO is fully enforced, it applies to all users globally—overriding individual settings unless a user is explicitly listed as an exception.

To enforce single sign-on:

1. Go to Manage SSO enforcement > IDP Configuration > click SSO Enforcement.
2. Click Enforce SSO. This means all users are required to log in through SSO unless they are an SSO user exception.
3. Make sure you acknowledge that you understand these changes take effect immediately.
4. Click Save Changes.