Enterprise SSO
Test before enforcement
Exercise every supported user path during optional SSO and again during the seven-day grace period.
Recommended test identities
Owner
Confirm configuration access and recovery ownership.
Administrator
Confirm delegated management and normal portal access.
Standard user
Confirm least-privilege portal and browser-extension access.
Test sequence
- Open a private browser window and enter the user's work email on the ThreatPrevent sign-in page.
- Select company SSO and complete Entra authentication.
- Confirm the correct ThreatPrevent organisation and role are available.
- Sign out, install the approved browser-extension build and select company SSO.
- Confirm the system-browser flow returns control to the extension and the correct organisation is shown.
- Run a permitted trust check and confirm normal results.
- Repeat for owner, administrator and standard user accounts.
- Confirm a user outside the verified domain is not silently admitted.
- If a user belongs to multiple organisations, confirm SSO access applies only to the organisation that authenticated them.
Readiness checks
Enforcement can be scheduled only when the policy is enabled, an active provider is verified, a domain is verified, an owner has an identity link, and an owner has completed a successful portal SSO test.
Record the result
Keep the test date, user roles, portal result, extension result and named recovery contacts with the customer's onboarding record. Do not schedule enforcement with only one successfully tested administrator.
Continue to enforcement