security-noteDifficulty: beginnerTime: 15mVersion: v1Reviewed: 2026-07-14Reviewer: Identity ownerTags: help, admin-security, identity
Enable SSO and Enforce MFA
Connect IdP and enforce MFA policy for all human users.
Overview
Connect IdP and enforce MFA policy for all human users.
Audience
- Admin
- It Security
Product Area
Identity
Prerequisites
- IdP admin access
Steps
- Configure SSO provider
Register metadata/callback URL and validate audience/issuer settings.
- Enforce MFA
Set mandatory MFA policy for privileged and standard users.
Expected Result
The Identity workflow completes without unresolved validation errors, and the result is visible to the intended roles.
Security and Audit Notes
- Use the least-privileged role that can complete the task.
- Confirm the resulting change or decision appears in the workspace audit trail when the workflow changes customer data or access.
Limits and Preconditions
- Available controls depend on the tenant plan, enabled modules, jurisdiction, and administrator policy.
- If a named control is not visible, confirm entitlement and role access before treating the behavior as a product failure.
Troubleshooting
- Issuer mismatch: Ensure provider issuer exactly matches tenant configuration.
Related Articles
Escalation
If the documented result cannot be reached after the checks above, capture the workspace identifier, affected product area, timestamp, and a redacted error message, then use Support. Never include secrets, privileged legal content, or customer documents in the initial report.