User-Level MFA Activation for Non-SSO Users in SSO-Enabled Accounts
Customer Use Case:
The customer has Single Sign-On (SSO) enabled at the account level and enforces Multi-Factor Authentication (MFA) through their Identity Provider for SSO users. However, some users are exempt from SSO enforcement and must log in using their RingCentral credentials.
Currently, when SSO is enabled at the account level, RingCentral Multi-Factor Authentication (MFA) is disabled globally and cannot be enabled for individual users. This leaves non-SSO users without MFA protection.
The customer is requesting the ability to enable RingCentral MFA at the user level for users who are exempt from SSO enforcement while maintaining SSO and Identity Provider MFA for other users.
Problem Statement:
Accounts with SSO enabled cannot enable RingCentral MFA even for users who are not using SSO. This creates a security gap for exempt users who authenticate directly with RingCentral credentials.
Requested Functionality:
Allow administrators to enable RingCentral Multi-Factor Authentication at the user level even when SSO is enabled at the account level.
Specifically:
SSO-enabled users continue authenticating via Identity Provider MFA.
Non-SSO users authenticate using RingCentral credentials.
RingCentral MFA can be enabled individually for non-SSO users.
No requirement to disable SSO globally.
Business Impact:
Without this capability, non-SSO users cannot be protected by Multi-Factor Authentication when SSO is enabled.
Ryan
shared this idea
-
Douglas
commented
Single Sign On per user is no longer available!
Bottom line, I have the Company Wide SSO settings for "SSO and RingCentral Credentials", like it has been for 18 months and now the option to turn on or off SSO per user is gone and support is saying that would be a new user function request and to fill this out. I say look at your own support pages and you will see that it was there and now it is gone, this is NOT a new feature, but one that needs to be activated again.
Below is the actual URL to the RingCentral support page that reflects the way it used to be.
If there is something I am doing wrong or maybe you just took away the option, can someone please let me know at douglas.woodyard@lakecountyfl.gov?
Thanks
