Enforce Single Sign On Users to Select an Identity Provider
Oct 7, 2025
API Access Management
Overview
The purpose of this article is to enforce some single sign-on users to log in through Identity Providers (IdPs) using routing rules.
Applies To
- Identity Providers (IdPs)
- Single Sign On (SSO)
- Routing rules
Cause
Prevent some users from SSO and allow them to only log in through IdPs after entering their username.
- For example, if Google and Yahoo IdP should be used for specific users with the example.com domain:
- When the user enters the username and then clicks next:
-
- They should be routed to use one of the two IdPs:
Solution
To enforce example.com users to sign in through IdPs even if they use SSO, configure the Google IdP routing rule in the Dashboard in Security > Identity Providers > Routing Rules to be like the following:
Configure the Yahoo IdP routing rule in the Dashboard in Security > Identity Providers > Routing Rules to be like the following:
