Authentication Policies - Can you add a single user to two different policies?

[Jessie Yorke]

Can one user be associated to multiple different authentication policies? If so, how does the system understand which policy to apply? I can't find anything in help articles! Thanks.

[Lucas Knorr]

Hi @Jessie Yorke
you can move users between policies pretty easy, but it`s not supported to add one user to multiple authentication policies at the same time. 

[Jessie Yorke]

Thank you Lucas! Does it error if you try and do this, blocking a save? Or does it just silently fail?

[Lucas Knorr]

There will be no possibility of something failing or causing an error. A user will always be able to log in with the settings configured in the respective authentication policy.

Example:
User XY is assigned to policy A, which currently does not enforce SSO.
Now the login requirements for user XY have changed => The user is now being assigned to policy B which enforces SSO. => In this step the user is automatically removed from Policy A.

[Jessie Yorke]

Got it, that's really good to know, thank you