We are not on the Enterprise addition, and we recently set up SSO, using Google, for our users, but we have a bunch of users who already have logins using email and password. Is there a way we, or someone at Metabase, can remove the user passwords so that we can force people to utilize the Google SSO for login?
Hi @bwilcox
Currently only the Enterprise/Pro edition has the option to disable email/password logins:
https://www.metabase.com/docs/latest/enterprise-guide/authenticating-with-saml.html#disabling-password-log-in
Only you have access to your instance. You would have to change the application database table core_user.google_auth
to true
and change the password to something random, then the users would only be able to login with Google.
So what if they login with google auth to create an account, then do a forgot password to set a password that they can then use to login after they get fired?
That’s not allowed