Exempt Users from SSO Requirement

Users can be added to a whitelist that allows them to bypass SSO enforcement restrictions. This allows the users to do two main things that are banned by enforcement:

• Users can login using the Aptible credentials and still access the Organization's resources.

• Users can use their SSH key to access the git remote.

Account owners are always exempted from SSO enforcement and cannot be added to the whitelist.

Whitelist membership should be restricted as much as possible to get the most benefit from the SSO enforcement. However, in some cases, whitelisting may be necessary. Outside contributors (e.g., consultants or contractors) who do not have an account in your SSO provider or "robot" accounts used in Continuous Integration/Continuous Deployment systems are common examples of when a whitelist membership may be appropriate.