Hello @sfernandez ,
Thank you for reaching out, and welcome to the Docusign Community! We appreciate your question and want to assure you that we are here to support you with as much knowledge as possible.
I understand you need guidance setting up SSO and have some questions. Rest assured that I will make an effort to help.
The DocuSign organization administrator with the Administrator permission profile, have the authority to close external domain accounts. These accounts, known as external accounts, are personal accounts that are not part of the organization.
Note: If you have verified that your organization does have access to external account eviction (closing account), but the Actions menu is not present, this indicates that this user's external account is not free and is therefore not eligible to be evicted. You will need to contact the users directly to request that they close their external accounts.
Articles:
Close Free External Domain Accounts
Personal Account Eviction: How do I deal with unwanted accounts on my claimed domain?
Evicting personal accounts will close the accounts, which means the accounts and the documents will no longer be accessible. Let me explain the impact of setting up SSO:
SSO relies on the person logging in having a seat on an account linked to the Organization where the domain is claimed. If the person logging in doesn't have a seat in any of the linked accounts (external account only), then JIT tries to provision one for them.
If the person in question also has access to other (unlinked) accounts, then they can still access those through SSO. It just requires that they have access to an account that is linked to the Organization. If the person can successfully authenticate into one of the linked accounts, then they're past the SSO authentication step. The next step is the Account Picker (assuming they have multiple User IDs attributed to the email address). From there, they can access accounts that aren't linked to the Organization where SSO is set up. Also, if they have multiple seats under the same User ID, Switch Accounts will allow them to hop between them without re-authenticating through SSO. More here: Switch Between Docusign Accounts
As for your question about the API users, it depends on the nature of the integration. If the integration is an older one (that used the Email and Password of an Admin user on the account), then the user who is being leveraged for the integration will need to be exempted from SSO requirements (those older integrations aren't compatible with SSO, so the user being leveraged for it needs to be able to log in to Docusign using a password). If it's a newer integration (where the Org Admin has to grant access to the integration when it's set up), then those integrations are compatible with SSO, and wouldn't be impacted (because they are relying on Org-level access grants, not the login credentials of a specific user). Please see: How to exclude specific users from SSO requirements?
Sharing the article with the comprehensive guide for setting up SSO: Basic Steps to Setting Up SSO for Your Docusign Organization. Regarding setting up SSO in Demo, this is absolutely possible. Please note that you will need to set them up separately as they are in different environments. If there are any issues or further questions, it's best to create a support case.
To open a support case in the Docusign Support Center, go to the "Get Support" section and select "Open a Support Case.” Log in using your Docusign credentials and select a case subject. If you have multiple Docusign accounts, choose the appropriate account to continue. Open a case in the Docusign Support Center.
Note: Some advanced features and options are supported only in specific Docusign plans. Your account plan might not support some of the options discussed in this help topic. Contact your account administrator for more information about which options are available for your account. Or, visit our Plans and Pricing web page for more details on the features included with your plan. Compare eSignature plans & pricing.
Let us know if you need further assistance.
Best regards,
Melanie | Docusign Community Moderator
"Select as Best" below if you find the answer a valid solution to your issue.