Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

with Ory Network and the B2B SSO feature: once a particular domain like `@example.com` is set up with an SSO provider, is it possible to disable password logins entirely? (force all users to go through SSO)

It seems that the <https://www.ory.sh/docs/kratos/self-service/flows/user-login#login-for-client-side-ajax-browser-clients|login flow> still returns UI elements for password input, even when the domain should be SSO.

If you use the default account experience from us, the nodes are hidden. For custom UI we have some work underway to only return relevant nodes in the API.

the user can only use the SSO provider to sign in by default