We would like to be able to allow the “Account Owner” to login with a password and bypass SSO.
I notice on the logon screen, it does support the “Login with a password” function. But, regardless, it always redirects to our IDP. Alternatively, there could be a special logon URL which bypasses SSO. I’ve seen it done multiple ways.
The typical use case is so that the privileged “Account Owner” account is NOT tied to an actual individual in the organization. Individuals come and go, and SSO can break. Therefore, we usually want the superuser account to be a generic, unlicensed, break-glass account that does not require SSO and is protected by MFA.
To be clear, we do NOT want any other user to be able to login via a “backdoor” password and bypass SSO.
