Hey everyone, I can’t find this in documentation, but how do Guests work with SSO when login via SSO is enforced? Do they need a company email? Or is it possible to invite users with non-company emails even when this setting is enabled?
Alternatively, is it possible to allow login via Google AND SSO, but not via email/password? There isn’t an option like that in Settings, so I expect no 🤔
Hi
Did you find an answer to your questions?
We would also like to enforce SSO but we want to still have an account which can log in just with username and password to be able in case to reset the SSO configuration if something goes wrong.
Did you guys find an answer to your query? I am also trying to find what happens to guest account once sso has been enforced?
Hey there,
You can enforce SSO for your mail domains, but this doesn’t apply for guests which may use a different mail domain.
For guests there’s a special setting which defines on what terms they are allowed on your organization space.
That’s weird, @Pat_Maechler , we have an organization licence as well, but I don’t have all those options for guest memberships ?
I only have 2 items there: public link sharing and open sessions.
Did you do anything special to get this ? Or are you on another licence ?
@Alex_Boschmans We’re on an enterprise license.
That might explain it (I’ve never seen the UI of the org license).
Ah, ok. I just did a quick search, and it indeed seems to be only for enterprise admins. At the end of this article ( https://help.figma.com/hc/en-us/articles/4420557724439-Admins-in-Figma ) it states : * Control guest access and default roles (Enterprise plan only)
Oh well, learned something new.
So this is great stuff, thanks for finding out the info about controlling guest access but needing Enterprise licensing to do so.
However, this doesn’t completely answer the question definitnately… If we are using an organization license and we enforce SSO only sign in, will this prevent existing guest users from logging in? Does the organizational account set the default to ‘allow guest login’ when SSO is enforced, or does it block it? I know we don’t have access to change the settings, but what is the default for organizational accounts?
Hey Ted_Larsen! To answer your question, SAML SSO only applies to members of a Figma organization. Guests can log in via Google SSO or their email and unique password, regardless of an organization’s SAML SSO settings. You can find additional information here: https://help.figma.com/hc/en-us/articles/360040532333-Guide-to-SAML-SSO Hope this helps!
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.