---
title: "Let organisations require single sign-on · Agent Wranglers"
url: https://agentwranglers.se/playbook/accounts/business-sign-on-and-provisioning/require-sso
updated: 2026-10-20
licence: "All rights reserved"
---

# Let organisations require single sign-on

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Recommended
- Chapter: [Business sign-on and provisioning](https://agentwranglers.se/playbook/accounts/business-sign-on-and-provisioning)
- Rule: Let an organisation require its single sign-on for every member with its domain. Keep one owner with a passkey who can sign in without it.
- How: When the setting is on, refuse passwords and email links for those members, and end their other sessions. The spare owner stops a broken provider setup from locking the organisation out. Log each sign-in by that owner and notify all owners.
- Check: Turn the setting on. A member with the domain cannot sign in with a password. The spare owner can, and the other owners get a notice.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers accounts playbook: https://agentwranglers.se/playbook/accounts/business-sign-on-and-provisioning/require-sso`.

- Previous: [Connect single sign-on per organisation](https://agentwranglers.se/playbook/accounts/business-sign-on-and-provisioning/organisation-sso)
- Next: [Provision users with SCIM](https://agentwranglers.se/playbook/accounts/business-sign-on-and-provisioning/scim-provisioning)
- [Business sign-on and provisioning](https://agentwranglers.se/playbook/accounts/business-sign-on-and-provisioning)