Hey, silly question, I have two users to my email address, one's the owner user, and the other is the app user connected via SAML. The two users have different permissions (the first has full access while the latter has project level access) When I try and connect to the owner account Descope automatically redirects me to the SAML user since the domain is associated with SAML. How can I override this and log in to the Owner user??

SSO Exclusion List You can bypass SAML redirection by adding your owner account email to the SSO Exclusion List . This allows specific login IDs to bypass SSO authentication - useful for "break glass" accounts. Steps to Configure 1. Go to your tenant settings in the Descope Console 2. Navigate to the Enforce SSO section 3. Add your owner account email to the SSO Exclusion List

// Example exclusion list entry
<mailto:owner@yourdomain.com|owner@yourdomain.com>

4. Save the configuration Alternative Approach If you need immediate access, you can also modify your authentication flow to check for specific conditions before routing to SSO . This requires flow configuration but gives you more granular control over when SSO is enforced. • The exclusion list prevents automatic SAML redirection for specified accounts • This maintains security while allowing administrative access when needed Tenant Settings | Descope Documentation SSO Enforcement in Flows | Descope Documentation