Organizational Policies that stop 'user' from unsyncing SSO or leaving organization

I am reviewing the end user experience prior to rolling licensing to basic end users and onboarding them to the enterprise licensed, single organization. When signed in as the user (master password reset auto-enrolled) I can simply click on t


he organization tab and choose “unlink SSO” or LEAVE.

Thanks for the feedback, it has been passed along to the team. It is worth noting that if an organization is using Directory Connector, it will automatically invite a user back to the organization.

I think a mechanism to prevent people from leaving the organization would be easier to swallow if an organization has verified their domain.

So, if Contoso.com verifies ownership of their domain, it could prevent anyone with an @Contoso.com email from leaving the organization.

Should I create a separate feature request for this?

Hey Vivian, there are upcoming changes for those with verified domains, allowing for both full deletion of users (rather than revoke etc…) and preventing team members with company emails from leaving the organization.

That’s great news, I’ll just wait patiently for it to be added to the roadmap (since I don’t think it’s currently on there? Maybe I’m just looking in the wrong place.)

Thanks!

Update: Bitwarden team has pushed this feature out. Many thanks to the Bitwarden team for their diligence in implementing this feature.