SCIM/Azure AD SSO is configured, but users can still log in with a plain username and password in addition to "Log in with SSO," even though the intent was to restrict authentication to Azure AD only.

All FAQ questions / Security and access

Answer

Check the "Enable Default IDP" setting in the user's (or the relevant IAM) configuration — when set to Yes, it allows authentication through both the external identity provider (Azure AD) and the default username/password method simultaneously; setting it to No restricts that user (or configuration scope) to Azure AD authentication only, closing off the username/password fallback that was still working alongside SSO.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions