SSO - Reduce setup overhead by allowing Enforcing SSO with OIDC
B
Brenton Johnson
## Overview
SAML-based enforcement is heavy and slow to configure for smaller orgs.
We are requesting the ability to enforce Single Sign-On (SSO) using OpenID Connect (OIDC) as the authentication method. This allows us to eliminate passwords for end users without extra config.
## Desired Outcomes
- Enforced login via OIDC for all users, with no fallback to password-based authentication
- Admin controls to:
- Enable/disable local login
- View enforcement status
## Request Summary
- Enable OIDC enforcement option in the admin settings
- Provide migration path for existing users
- Add support for commonly used IDPs like Microsoft Entra ID and Google Workspace
J
Joel Kino
Also need SSO for Customer Admin logins so that they don't need to setup a username and password