---
title: Disable local login for users with single sign-on
slug: configured-commerce/docs/disable-local-login-for-users-with-single-sign-on
docTags: 
createdAt: 2026-08-13T10:46:24.000Z
---

When you have single sign-on (SSO) enabled in Optimizely Configured Commerce, you can disable local login for console and website users to prevent them logging in with a normal username and password. 

:::hint{type="info"}
**Note**

Users must have a role of ISC\_Implementer or ISC\_System to edit these settings.
:::

## Disable local login

The Admin Console has two settings to disable local login: one for Admin Console users and one for website users.

![Disable local login.png](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/VoBGcxr-MbQDQ6qQVNMq6-20260720-144453.png)

1. Go to **Administration > Settings**.
2. Search for **Disable local login** or go to **System Settings > Security**.
3. Enable the settings you want to apply. The default is **No**.
4. Click **Save**.

## Exempt users

When you have enabled at least one of the disable local login settings enabled, you can edit user profiles to make them exempt from this rule.

1. Go to a user profile.
2. Enable **Exempt from SSO only login Policy**. This lets the user use a normal username and password to log in.