Enforce SSO

Learn how to disable Retool's standard authentication and require SSO authentication.

Available on:Enterprise plan

You can disable Retool's built-in authentication method (email address and password) and require that all users log in using SSO credentials.

Cloud-hosted organizations

Cloud-hosted Retool organizations must configure and test SSO before enabling this setting. Disabling Retool's standard authentication can lock all users out of your organization.

Navigate to your organization's Single Sign On (SSO) settings and toggle Disable Login with Email and Password.

Disable standard authentication and enforce SSO.

Self-hosted organizations

Set the DISABLE_USER_PASS_LOGIN environment variable and restart your deployment.