One feature that would significantly improve both security and usability is the ability to enforce SSO while still allowing email-based authentication links for certifications.

Today, organizations must choose between requiring SSO for all users or using the email authentication links needed for certification workflows. These two capabilities shouldn't be mutually exclusive.

The email authentication link only allows a user to review and certify the specific item—it does not provide access to the Workiva application or Workspace. Because of that, allowing email authentication for certifications would not weaken the security of an SSO-enforced environment, while making the certification process much more efficient for users.

This would enable organizations to maintain strong security controls through mandatory SSO while providing a streamlined certification experience for approvers who simply need to validate and certify information.

Please consider allowing email authentication links as an exception for certification workflows, even when SSO enforcement is enabled.