Workiva Support Center

Org Security Admins can allow specific users to sign in without using SAML single sign-on by adding them to the exceptions list. For example, if you have users like external auditors, consultants, or people outside of your company who need access to Workiva and can’t use SSO, add them to the exceptions list.

All other sign-in and password settings will still be enforced for users who are on the exceptions list.

Add a user to the SAML single sign-on exceptions list

To add a user to the exceptions list:

1. In the top right, click the user icon and select Organization Admin from the Admin dropdown.
2. Click Security and choose the Single sign-on tab.
3. In the Force SSO and exceptions section, under SSO exceptions list, click the Add users dropdown. You can Add users manually or Add users in bulk via uploading a CSV file if you have a large list of users to add. 
   
4. If adding users manually:
   1. Select the users that you want to add.
   2. Click Add to list.
      
   3. The Status column for those users should change to On SSO exceptions list.
      
5. If adding users in bulk:
   1. Download the CSV template to help you with accurate formatting, and fill it out. If using your own file, make sure that your column headings match the headings in the template.
      • Usernames must be unique.
      • Email addresses must be valid.

   2. A valid CSV file looks like this:

      Username,"Last Name","First Name",Active,Email,"SAML ID","Last Login (UTC)",Licenses,"Organization Roles","Workspace Memberships","Certifier Admin","Certifier Creator","Comment Admin","Content Manager","Copy Manager","Data Sharing Manager","Limited Starter",Professional,"Section 16 Access","Section 16 Filer",Standard,Starter,"Task Admin","Workspace Owner","Workspace Support User"
      "tessa.finley@workiva.com",Finlay,Tessa,true,"tessa.finley@workiva.com",None,Never,Starter,,"Configuration Workspace",,,,,,,,,,,,"Configuration Workspace",,,
      "griffon.holywell@workiva.com",Holywell,Griffon,true,"griffon.holywell@workiva.com",None,"2025-07-15 17:44:01",Professional,"Org Security Admin,Org User Admin,Org Workspace Admin","Configuration Workspace",,,,,,,,"Configuration Workspace",,,,,,,
      "samson.smith@workiva.com",Smith,Samson,true,"samson.smith@workiva.com",samson.smith,Never,Starter,"Org Security Admin","Configuration Workspace",,,,,,,,,,,,"Configuration Workspace",,,

   3. Click Choose file and upload your valid CSV file.
      
   4. Review the list of users that were obtained from the file. If everything looks correct, click Next.
   5. When the file has finished uploading (this may take some time, depending on the size of the file and the speed of your connection), click Finish.

Remove a user from the SAML single sign-on exceptions list

To remove a user from the exceptions list:

1. In the top right, click the user icon and select Organization Admin from the Admin dropdown.
2. Click Security and choose the Single sign-on tab.
   
3. In the Force SSO and exceptions section, under SSO exceptions list, select the users that you want to remove from the list.
4. Click Remove from list.