How can I exempt SSO enforcement for company admins, employees and contractors who can’t authenticate using SSO?

When Single Sign-On (SSO) is enabled, it is automatically enforced for all company admins, employees and contractors with verified domains.

Company admins, employees and contractors with unverified domains are automatically exempted and can continue signing in using email and password.

In some cases, a company admin, employee or contractor may be unable to authenticate using SSO. For example, when using a shared or service email address (such as hr@company.com). In these situations, you can exempt specific company admins from SSO enforcement.

To allow specific company admins to sign in using email and password instead of SSO:

1. Go to Company Settings → Single Sign-On 
   
2. Scroll down to the "Users exempt from SSO" tab
3.  Click Add user.
4. Search for the company admin, employee or contractor you want to exempt.
5. Confirm and add them.

Once added, the exempted admin, employee or contractor can sign in using email and password even while SSO enforcement remains enabled.

This exemption is also required when an employee or contractor needs to change their login email from their work email to a personal email address. Since SSO enforcement ties sign-in to the verified work domain, the employee or contractor must first be exempted from SSO before the login email can be updated to a personal address.

Note: If single sign-on (SSO) is set up incorrectly or required for all, they may be locked out of your Remote account. If this happens, contact Remote through live messaging and let us know.

If the company admin can authenticate using SSO again, you can remove their exemption:

1. Find the admin, employee or contractor in the SSO exemption table.
2. Click Remove exemption.
3. Confirm the action.

After the exemption is removed, the admin, employee or contractor will be required to sign in using SSO.