Step 3: Terminate the SAML SSO setup

To terminate the transition of your enterprise to SAML SSO:

1. Test the SSO connection.
2. Send the SSO login URL to invite enterprise users to sign in to SonarQube Cloud with SSO. 
3. Once they have signed in, their SAML SSO account is created in SonarQube Cloud and they have access to their organization(s) through the automatic group synchronization with the identity provider. They should:
   • Check that they have access to their organization(s) and can perform their tasks as before. 
   • Generate their analysis tokens with their SAML SSO account. (They can still use their DevOps platform service (DOP) account tokens to execute analysis as long as their DOP account still exists). 
4. Sign up with SonarQube Cloud by using the enterprise’s SSO log in URL. Your SAML SSO account is created. 
5. Sign in to SonarQube Cloud with your DOP account and grant your SAML SSO account the Administer Enterprise permission.
6. Once the enterprise users have successfully transitioned to SAML SSO (and, during a trial, once you are sure you want to purchase the Enterprise plan), you can remove their DOP accounts from the organizations and the users can delete their DOP account. We recommend that you don’t remove the admin DOP accounts since, with a SAML SSO account, you currently cannot bind a SonarQube Cloud organization with the corresponding DOP organization. 

Related pages

• Step 1: Verify the user groups of the enterprise's organizations
• Step 2: Configure SAML SSO in your identity provider and in SonarQube Cloud
  • In Okta
  • In Microsoft Entra ID