20 Oct 2026, 01:15 UTC · 1 question · ID 03dde10fc13e
Who asked
Profile
We don’t have a profile for this visitor.
Question 1
“Can we force everyone to sign in with SSO?”
Answer
Partly answered
The /security page says users can sign in through an identity provider with enforced two-step login. It never says whether single sign-on can be made the only sign-in method for a workspace, or how admins regain access if the identity provider is down.
Add SSO enforcement detail to the Single sign-on card on /security
Who needs it: IT admins and security reviewers checking a vendor
What is missing
Whether admins can require single sign-on as the only way to sign in is not stated.
What happens when the identity provider is unavailable, such as an admin recovery path, is not covered.
Which plans include single sign-on enforcement is not stated.
Where
Update this section: Extend the "Single sign-on" card in "Security and control, built into every hub", beside "Field-level permissions" and "Audit history".
What to do
Confirm with the security team and product whether single sign-on can be enforced for every user, what recovery path exists if the identity provider is down, and which plans include it.
Add the confirmed enforcement option and recovery path to the Single sign-on card.
Link the card to setup guidance once it exists, and note the plan that includes it.
Done when: The Single sign-on card on /security states whether SSO can be required for all users, how access is recovered if the identity provider is down, and which plans include it.
Answer full page
Yes. You can make SSO the only way to sign in to your workspace, with a recovery path in case your identity provider is down. The docs below walk through the setup.