Skip to main content

Enforce Non-Bypassable SSO with Optional Break-Glass Account

Core Web AppSecurity & credentials

Add a per-account setting that enforces SSO without bypass, even for Admins and Super-Admins. This would make SSO a true security requirement.

1 comment

Log in to comment and vote

Comments1

  • Blue Raccoon

    •

    May 16, 2025

    We have regulatory requirements that we meet using SSO. E.g. conditional access policies on AzureAD which enforce device compliance, location, etc. If that can simply be bypassed, then SSO is simply there for convenience of sign-in, but offers zero security benefit.