---
schema_version: "1"
id: e245bde212f7195b68780e24a8337a27ed8306d363ac1be850cfc9ab28268528
title: Implications of Enabling Single Sign-on
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/platform_o_sso_implications.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.platform_o_sso_implications.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d03320c77a10100a8a107276a9f510595f7fa0a2821039bb54146ee156544179
description: Understand the changes in password policies and security measures when single sign-on is enabled in Own.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Implications of Enabling Single Sign-on

Understand the changes in password policies and security measures when single sign-on is enabled in Own.

When single sign-on (SSO) is enabled in Own, several password policies and security measures are affected:

- Only the Master Admin can enable single sign-on.
- Users can no longer set their passwords in the application. The password length and complexity rules are determined by the identity provider (IdP).
- Password expiration and the prevention of old password reuse cannot be enforced within Own.
- Users cannot use the Forgot/Reset Password mechanism. If they attempt to do so, they will be directed to their Identity Provider for assistance.

If you need to enable an API user after implementing Single Sign-On, refer to [Accessing Own through API.](https://help.salesforce.com/s/articleView?id=platform.platform_o_access_through_api.htm&release=264.0.0&type=5 "Own provides API access through all pricing plans with the purpose of letting you manipulate and export some of your jobs and data.")

If you are completely locked out and unable to manage authentication via the IdP, submit a case to our Support team for assistance.