Enforced SAML SSO on OpinionX Workspaces (October 2026 Updates)
Workspaces on the Accelerate tier can now require everyone at their company’s email domains to sign in to OpinionX through SSO. Password and Google sign-in are switched off for those accounts, so your identity provider controls who can get into your workspace.
1. Why Enforced SAML SSO matters
Until now, SAML SSO on OpinionX was an extra way to sign in, not the only way. A teammate who signed up with a password could keep using it, even after leaving your company.
With Enforced SAML switched on, your identity provider decides who gets in. When someone leaves and you remove them in Microsoft Entra, Okta or whichever provider you use, they can’t sign back in to OpinionX with an old password or Google account.
2. What changes when it’s on
SSO only → People at your approved email domains can only sign in through your workspace’s SAML connection. Password and Google sign-in stop working for them, including on any other OpinionX workspaces they belong to. Password reset can’t be used to get around it either.
Existing accounts keep everything → Teammates who already have an OpinionX account keep their surveys, data and access to other workspaces once they sign in through SSO.
New teammates join through SSO → First-time users are added to your workspace as Teammates when they first sign in. Existing workspace roles stay as they are.
Invites stay inside your company → New invitations to an enforced workspace must use one of your approved email domains.
One switchover moment → Turning on enforcement ends existing sessions for everyone at your approved domains, so the whole team moves to SSO at the same time.
3. How to turn on Enforced SAML SSO
Enforced SAML isn’t a self-serve setting. Our team switches it on for you once your workspace is ready.
If you’re on Accelerate and already have SAML SSO set up, contact your account manager with a date that suits your team. Before switching it on, we’ll go through a readiness check with you covering:
your approved domains
whether your SSO connection has been tested
which members might lose access
whether you have enough SSO seats for everyone
If you’re not on the Accelerate tier yet but need this for a security review, book a call and we’ll walk you through what’s involved.
— — —
We’ve also rewritten our SAML SSO guide to cover enforcement end to end. It goes from preparing your team and identity provider, through managing access once enforcement is on, to troubleshooting for anyone who gets stuck at sign-in.