Enforce SSO for SAML/Entra by user or group? Is is all of nothing? What about breakglass account?

Question

I dont see an option to control who can login with SALM sso or username and password. How can i enable sso for everyone but leave out the account owners? What happens if account owners are also forced to use SSO and there is a issue with th SAML config after the fact? How do i get back in?

Leianne C · Answer

Hi ​@Nkrasniqi, thank you for posting in the Lucid community! Unfortunately, Lucid does not currently offer a dedicated "Break Glass" function for admin accounts, meaning any enabled authentication method applies globally to all users and admins.In the meantime, here are two options to help ensure you maintain access:As a backup precaution, you can enable the Email/Password login option in the Admin Panel so admins can still maintain access if an issue ever arises with your SSO/SAML provider.Should you ever get locked out or need an email/password sign-in to troubleshoot, please don't hesitate to reach out. Lucid Support is always happy to jump in, help you recover your account quickly, and temporarily enable that option for you.Other users have also submitted an idea for this capability—I would encourage you to upvote the post linked below and share any additional details about what you’d like to see in this experience within the thread:Hope this helps! Please don’t hesitate to let us know if you have any questions.

Create an account in the community

Log in to the community