Forced SSO - cannot get plugins/desktop or mobile APP to login

[dwtypeofcode]

Prerequisites

• I have searched the existing Closed AND Open Issues AND Discussions
• I have searched and read the documentation

Vaultwarden Support String

I've configured SSO with EntraID with the manual: https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect

I've enabled SSO in docker compose file, I've also enabled SSO_ONLY: true

Now when I try to login to any account via web browser plugin OR bitwarden desktop app OR android bitwarden app I'm getting error like SSO sign-in required - when typing login - it doesn't redirect me to the O365 login page.

When I disable SSO_ONLY: true - it'll work without any problem, but there's another "issue". When you block some account on the EntraID - then user IS STILL ABLE to login via his master password.

Vaultwarden Build Version

1.35.2

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

nginx 1.22.1

Host/Server Operating System

Linux

Operating System Version

Debian

Clients

Browser Extension

Client Version

No response

Steps To Reproduce

1. Set SSO_ONLY: true in docker compose
2. Deploy docker container
3. Try to login via browser extension / desktop app / android app.

Expected Result

To be able to login via forced SSO on mobile / desktop app and browser plugin

Actual Result

SSO sign-in is required

Logs

Screenshots or Videos

No response

Additional Context

No response

[mvalois]

You need to click on "Use single sign-on" instead of "continue" : https://bitwarden.com/help/using-sso/

[dwtypeofcode]

Hmm... strange, because I've enabled SSO again, and the login with SSO button appeared, previously both in app and plugin there was only continue button.

But still the issue "When you block some account on the EntraID - then user IS STILL ABLE to login via his master password." persist - is there some workaround for this?