Prevent non-SAML users from joining your organization
Published: September 25, 2026
Organization administrators can now prevent non-SAML users in the SAML SSO settings in Manage. The setting appears once SAML SSO is enabled, and is available on Enterprise plans.
When you turn on the setting, only a SAML identity from your organization can accept an invitation or request access. The setting is off by default.
It does not remove existing non-SAML users. To enforce SAML for all members, you must also remove these users. See the guide for further details.
Sanity does not merge duplicate accounts, so first make sure that each SAML identity has the correct roles. Contact your Sanity account team for help with this step.
Related documentation
Set up single sign-on with SAML
This article takes you through the process of setting up SAML (Security Assertion Markup Language) SSO (single sign-on) for your organization.
Prevent non-SAML users from joining your organization
This article describes how to prevent non-SAML users from joining your organization and what to do with existing users on non-SAML identity providers.