22 Oct 2026, 10:06 UTC · 2 questions · ID eb4d5d7712ac
Who asked
Persona
CIO (Chief Information Officer)
Company
Charles Schwab
Industry
Financial services
Pages visited (1)
/securityQuestions 1 and 2 asked here
Question 1
“Do you support SAML single sign-on with Microsoft Entra ID?”
Answer
Partly answered
The security page says you can sign in through your identity provider with enforced two-step login. It never names SAML or any other protocol, and never says which identity providers, such as Microsoft Entra ID, are supported.
Name SSO protocols and supported identity providers on /security
Who needs it: CIOs and IT or security reviewers checking a vendor (this visitor: Charles Schwab)
What is missing
SAML 2.0 or any other single sign-on protocol is not named.
No identity providers are listed, and Microsoft Entra ID is not mentioned.
There is no pointer to setup steps for connecting an identity provider.
Where
Update this section: extend the "Single sign-on" card in "Security and control, built into every hub", beside "Field-level permissions" and "Audit history".
What to do
Confirm with the security and engineering teams which SSO protocols are supported and which identity providers are tested, including Microsoft Entra ID.
Add the confirmed protocols and named identity providers to the "Single sign-on" card.
Link the card to setup guidance for connecting an identity provider, if it exists.
Done when: /security's Single sign-on card names the supported protocols and identity providers, and says whether Microsoft Entra ID is one of them.
Answer full page
Yes, single sign-on is one of the security controls built into every hub, and the docs walk through connecting a SAML 2.0 identity provider. Our materials don't name Microsoft Entra ID specifically, so I'm happy to put you in touch with the team to confirm it.
/security lists single sign-on through your identity provider with enforced two-step login. It never says SSO can be required as the only way in for every user, or what recovery path exists if the identity provider is down.
Add SSO enforcement and recovery detail to /security
Who needs it: CIOs and IT or security reviewers checking a vendor (this visitor: Charles Schwab)
What is missing
No mention that single sign-on can be required for every user as the only way to sign in.
No mention of a recovery or break-glass path when the identity provider is unavailable.
No indication of which plans include SSO enforcement.
Where
Update this section: extend the "Single sign-on" card, after "Sign in with SAML or OpenID Connect, provision users with SCIM, and require two-step login."
What to do
Confirm with the security team and product how SSO enforcement works, which plans include it and how admin recovery works when the identity provider is down.
Add a line to the card on enforcing SSO for all users and the recovery path.
Link the card to the setup documentation for enforcing SSO.
Done when: The "Single sign-on" card on /security says whether SSO can be enforced for every user and how access is recovered if the identity provider is down.
Add sign-in controls to /solutions/financial-services
Who needs it: Financial services (banks, credit unions and insurers)
What is missing
No mention of single sign-on or enforcing it for all staff.
No link to the security controls regulated IT teams review.
Where
Update this section: add a third card beside "Approvals where you need them" and "The service members expect".
Related sections
Security and control, built into every hub
What to do
Add a card on access controls covering single sign-on enforcement for all staff, using the facts confirmed for /security.
Link the card to /security.
Done when: /solutions/financial-services mentions single sign-on enforcement and links to /security. Depends on: “Add SSO enforcement and recovery detail to /security”
Answer full page
Yes. You can make single sign-on the only way into your workspace, with a recovery path in case your identity provider is down. The docs below walk through the setup.