We have a customer with strict security requirements who wants to enforce authentication only via Azure Entra ID (SSO).

Currently, SSO is enabled and works as expected, but it’s still possible for users to log in using their Odoo username and password. This is not acceptable for their compliance needs, they want SSO to be the only authentication method.

Has anyone implemented a setup where Odoo completely disables local authentication (i.e., direct username/password login), allowing only Azure Entra ID-based SSO access?

We’re looking for the cleanest and most secure approach, ideally something that doesn’t break admin access or automated processes.

Any insights or best practices would be greatly appreciated!