Can I have users authenticate without SSO when SSO is configured?

Last updated: July 14, 2025

Context

When an organization has Single Sign-On (SSO) configured in Spacelift, some users may need to access the platform without using the configured SSO provider. This commonly occurs during tenant migrations or when collaborating across different organizations.

Answer

No, it is not possible to have users authenticate without using the configured SSO provider. When SSO is enabled, all users must authenticate through the configured SSO provider. There are two potential solutions to handle this situation:

  1. Add users as guests in your SSO provider (e.g., Okta) to grant them access through the configured SSO

  2. Temporarily revert to the previous SSO configuration if immediate access is required

If you are locked out of your account due to SSO configuration - please refer to https://support.spacelift.io/articles/5904812188-account-lock-out-due-to-sso-issue

For long-term solutions where teams need to collaborate across different organizations, it is recommended to set up separate Spacelift environments for each organization with their respective SSO configurations.