Mandatory SSO enforcement
After successful testing, owners and administrators can require company SSO for their organisation. ThreatPrevent applies a fixed seven-day grace period before activation.
SSO is offered and email-code sign-in remains available.
A seven-day grace period is active. Continue testing all users and extension installations.
Email-code access to the enforced organisation is blocked. SSO assurance is checked on every portal request.
What activation changes
- Portal access to the organisation requires an SSO-authenticated session for that exact organisation.
- Existing browser-extension sessions that were not established through SSO are revoked.
- Users in several organisations retain access to non-enforced organisations through their permitted authentication methods.
- Provider, verified-domain and policy settings are locked while enforcement is scheduled or active; cancel or disable enforcement before changing them.
- Revoked extension sessions do not become valid again if enforcement is later disabled.
Emergency access
If mandatory SSO prevents every authorised administrator from signing in, contact ThreatPrevent using a previously identified recovery contact. Temporary recovery access may be available after identity and authority checks.
Rollback
Before activation, select Cancel schedule. After activation, select Disable enforcement to restore email-code fallback. Both actions are recorded. Provider changes can then be made and tested before enforcement is scheduled again.