What happens when SAML Single Sign-On (SSO) is turned on for company users?

When SSO is turned on, it's automatically enforced for company admins. They must log in to Remote using SSO, and any active password sessions will end.

Upon logging in via SSO, admins are redirected to their company's authentication page on their identity provider's site. There, they enter their company username and password. Depending on the identity provider setup, users can also verify their identity using multi-factor authentication.

To enforce SSO for employees and contractors, enable the toggle for those users. Note that SSO enforcement takes effect on their start date with the company.

• For employees/contractors without a work email → Their login email will remain their personal email. They won't be able to log in until either a work email is added or SSO enforcement for employees/contractors is disabled.
• For employees/contractors with an existing work email → Their login email will automatically switch to their work email, which they'll use to log in to Remote with SSO. If the employee is invited to the platform on or after their start date, they'll be prompted to create a password but will immediately be directed to sign in with SSO to gain access.