How To Enforce Client Portal SSO

By default, your customers can log into the client payment portal using either passwordless token authentication, or Single Sign On (SSO).

There are two prerequisites to using SSO:

1. The email address being used to log in must be associated with a Microsoft account
2. The administrator for the organization the Microsoft account belongs to must approve the first SSO login coming from FlexPoint

Enforcing SSO-only Login for the Client Portal

To force your customers to use SSO to log into the client portal, enable "Use SSO only" under the Branding tab of Settings > General:

Note: Your customers will not be able to log in without a properly configured Microsoft account if this setting is enabled.