Agent WranglersBusiness sign-on and provisioning Recommended
Let organisations require single sign-on
Let an organisation require its single sign-on for every member with its domain. Keep one owner with a passkey who can sign in without it.
How to do it
When the setting is on, refuse passwords and email links for those members, and end their other sessions. The spare owner stops a broken provider setup from locking the organisation out. Log each sign-in by that owner and notify all owners.
How to check
Turn the setting on. A member with the domain cannot sign in with a password. The spare owner can, and the other owners get a notice.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers accounts playbook: https://agentwranglers.se/playbook/accounts/business-sign-on-and-provisioning/require-sso.