Enforce SSO authentication
Learn how to disable Retool's standard authentication and require SSO authentication.
You can disable Retool's built-in authentication method (email address and password) and require that all users log in using SSO credentials.
- Cloud-hosted organizations
- Self-hosted organizations
Cloud-hosted Retool organizations must configure and test SSO before enabling this setting. Disabling Retool's standard authentication can lock all users out of your organization.
Navigate to your organization's Single Sign On (SSO) settings and toggle Disable Login with Email and Password.
Set the DISABLE_USER_PASS_LOGIN environment variable and restart your deployment.