Feature Summary #

SSO Enforcement strengthens security by requiring all users within an organization to authenticate exclusively via their company’s Identity Provider (IdP). Once enabled, this feature disables login through local Quality Clouds credentials (username and password), ensuring consistent enterprise access policies and minimizing the risk of unauthorized access.

This enforcement complements the SSO Federation feature by ensuring strict compliance with identity governance and removing exceptions or fallback authentication methods.

How It Works #

1. Activation #

SSO Enforcement can be activated by Quality Clouds using a toggle control found at:

Account > Security > SSO > SSO Enforcement & Federation

Tooltip: “When enabled, all users must log in via SSO. Local accounts using a username/password will no longer be allowed.”

Warning Prompt:
“Enforcing SSO Logins will disable local username/password access. Ensure SSO is properly set up to avoid access issues.”

2. Login Restriction #

Once enabled:

• All user authentications must pass through the organization’s IdP.
• Any attempt to log in using a local username/password will be blocked.

If users try to access the platform with local credentials, they will receive the following error:

“Authentication error. If you are experiencing login issues, please contact your administrator.”

3. New User Requirements #

While SSO Enforcement is active:

• Any newly created user (whether manually or automatically) must have the Has SSO flag enabled.
• Local credentials cannot be set.
• This ensures that all new accounts are compliant with the SSO requirement.

Edge Case Handling #

Login Attempt with Local Credentials #

Blocked login attempts via username/password trigger an authentication error. Users are instructed to contact their administrator for assistance.

Conflict with Deactivated Accounts #

If an account was deactivated manually (but still exists in the IdP), login via SSO will also be rejected. This applies even if SSO Enforcement is active.

Need Help? #

To ensure proper setup of SSO before enabling enforcement, please consult with your IT department or contact: help@qualityclouds.com