# Ensure Vercel team enforces SAML SSO for all members

- Source: https://support.icompaas.com/support/solutions/articles/a_1790262005470967-ensure-vercel-team-enforces-saml-sso-for-all-members
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Vercel cloud](https://support.icompaas.com/support/solutions/c_1790103019086234) › [Vercel checks](https://support.icompaas.com/support/solutions/folders/f_1790103034130491)
- Last updated: 2026-09-24
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure the Require Team Members to login with SAML setting is enabled, so that no team member can access the team's projects, deployments, or settings unless they are signed in through SAML SSO. Configuring SSO alone is not enough if members can still use other login methods.

**Rationale**

If SAML SSO is configured but not enforced, members can keep using personal Git or email logins that bypass the company's MFA and access rules. A former employee or an attacker with a stolen personal login could still reach the team. Enforcing SAML makes sure every session comes through the identity provider.

**Impact**

-   All members must sign in through SAML SSO
    
-   Blocks access through personal logins
    
-   Members need an active IdP account to sign in
    

**Default Value**

By default, SAML enforcement is disabled, even when SAML SSO is configured. Changing the SAML configuration later turns enforcement off automatically.

**Pre-Requisites**

-   Team Owner role
    
-   SAML SSO already configured
    
-   The Owner must be signed in through SAML SSO
    

**Test Plan**

1.  Sign in to Vercel at [https://vercel.com](https://vercel.com/).
    
2.  Select your team from the team switcher.
    
3.  Open Settings in the sidebar and select Security & Privacy.
    
4.  In the Authentication and User Provisioning section, verify that Require Team Members to login with SAML is Enabled.
    
5.  If it is disabled, follow the implementation steps.
    

**Implementation Steps**

1.  Sign in to Vercel at [https://vercel.com](https://vercel.com/).
    
2.  Select your team from the team switcher.
    
3.  Sign in using SAML SSO to confirm the configuration works.
    
4.  Open Settings in the sidebar and select Security & Privacy.
    
5.  Toggle Require Team Members to login with SAML to Enabled.
    
6.  Tell team members they must sign in with SAML SSO from now on.
    

**Backout Plan**

1.  Sign in to Vercel at [https://vercel.com](https://vercel.com/).
    
2.  Select your team from the team switcher.
    
3.  Open Settings in the sidebar and select Security & Privacy.
    
4.  Toggle Require Team Members to login with SAML to Disabled.
    

**Reference**

-   [https://vercel.com/docs/saml](https://vercel.com/docs/saml)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.