SSO: "Show Password Login on Sign-In Screen" Explained

What This Setting Controls

Once SSO is enabled for your Xenia workspace, your users will see a "Log in with SSO" button on the login screen. But you have a choice about whether the standard email + password login option also appears alongside it — or disappears entirely.

The "Show password login on sign-in screen" toggle in your SSO settings controls exactly this.

Where to Find It

Settings → Single Sign-On (SSO) → Show password login on sign-in screen

This toggle is the fourth item in the SSO configuration page, below Enable SSO, Verify Domain, Configure SSO, and Set Default Role.

Toggle ON — Password Login Visible Alongside SSO

When Show password login on sign-in screen is ON, users see both login options on the sign-in screen:

1. The standard email + password login (Log in button) — ❌ crossed out in the screenshot below to indicate this is not the preferred method for SSO workspaces
2. The Log in with SSO button ✅

They also still see:

• No password? Get login link — for users who don't have a password set
• Log in using your phone number — for phone-number-based accounts

When to use this: Turn this ON when your workspace has a mix of users — some who authenticate through your SSO provider (e.g., Azure AD, Okta, Google Workspace) and others who still use a traditional Xenia email and password. For example:

• Corporate employees log in via SSO
• Contract staff or external vendors log in with a standard email + password
• Users who were invited to Xenia before SSO was enabled and still have a password on file

Toggle OFF — SSO Only, No Password Login

When Show password login on sign-in screen is OFF, users see only the SSO option. The standard email + password fields are hidden. The login screen shows only:

• Email field
• Log in with SSO button ✅
• No password? Get login link
• Log in using your phone number

When to use this: Turn this OFF when your entire organization uses SSO and you want to enforce SSO as the only login method. This prevents users from attempting to log in with a password (which wouldn't work anyway for SSO-only users) and creates a cleaner, less confusing login experience.

This is the recommended setting for organizations that have fully migrated to SSO and do not have any users with standard email + password accounts.

How Users Experience Each State

Important Notes

Users with existing passwords: If a user was invited to Xenia before SSO was set up and has a password on their account, they will see both login options when the toggle is ON — even after SSO is configured. They can choose either method.

Users who log in through SSO never set a Xenia password: When someone logs in via SSO, their password is handled entirely by the identity provider (e.g., Azure AD, Okta, Google). Xenia never stores a password for them. If you turn the password toggle OFF for these users, they won't miss anything — they never had a Xenia password to begin with.

This toggle does not affect SSO functionality itself: Turning this toggle on or off does not enable or disable SSO. SSO continues to work regardless of this setting. This is purely a display preference for the login screen.

Need Help?
Reach out to our Support Team at Support@xenia.team