Vercel team enforces SAML SSO for all members

​

What this check verifies

Vercel team is assessed for SAML SSO enforcement across all members. When enforced, all team members must authenticate through the configured identity provider, preventing the use of individual Vercel credentials.

​

Risk

Without SAML SSO enforcement, team members can bypass centralized authentication and log in with individual credentials even when SAML is configured. This undermines identity governance, allows circumvention of MFA policies, and creates gaps in access auditing.

​

Recommendation

Enforce SAML SSO for all team members to ensure authentication is managed exclusively through your identity provider. This prevents credential bypass, enforces MFA policies, and provides centralized access control and audit capabilities.

​

Remediation

Dashboard steps

1. Navigate to your Vercel team settings
2. Go to the Security section
3. Ensure SAML SSO is configured and linked
4. Enable SSO enforcement to require all members to authenticate via the identity provider

​

References

• https://vercel.com/docs/accounts/team-members-and-roles
• https://vercel.com/docs/security/saml

​

Where this check fires

This check runs on every scheduled scan against your Vercel account. Findings appear at Cloud Security → Findings filterable by Check ID = team_saml_sso_enforced. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.

---

← Back to Vercel checks