@speedbird001 @SweetAction If I recall correctly the ability to force SSO for certain users was mentioned at a VIP meeting. Hopefully someone from 3CX can confirm here.
I'd want to force most users to use SSO, but still allow 2FA for some. A global default would be nice. If they try to login using 3CX creds it should identity them as an SSO user and switch them to that login method and no resetting of the local password allowed for those users. We would still need 2FA accounts with local creds for users without access to the SSO provider, break glass accounts, and for managing client systems.