We need single sign on to scale headcount, to improve visibility, to improve access and to improve security. Alternatively for non-profits, Google Workspace is free and supports external SAML applications as well and comes included with Google workspace. It then grew to manage our own google workspace by importing, updating, suspending, or even creating new profiles in our Google Workspace. My SSO delegates credential storage, credential verification, and 2FA verification to Google Workspace, while it otherwise manages the user pool within Google Workspace. After implementing single sign on from the ground up, I am wholly sold on eliminating individual and shared credentials from everyone's lives.