Can I fully disable "Local Account" in UiPath Automation Cloud

Help Orchestrator
1

Hi,

Given I’m in UiPath Automation Cloud
And my local IT requires SSO login with MFA.
When I have succefully configured “SAML” or “Azure AD” Auth,
Q: Is there a way to fully turn off and/or reject Basic Auth (UiPath accounts) at the Tenant level?

https://docs.uipath.com/automation-cloud/automation-cloud/latest/admin-guide/authentication-options

image
image1226×231 19.3 KB

I expect “not possible”, as the Tenant Admin and/or UiPath Support would need the “Local Account” as a backdoor if something goes sideways (especially the SAML config).
But please confirm if you know the answer!

Thx!

p.s
I understand I can Allow/not Allow Basic Auth at the account level:
image
A work-around would be to regulary maintain all users via the API, to:

  1. remove/disable all “local account”
  2. make sure all SSO accounts have “Always allow Basic” = False
2

d.s
For an Onprem install, this is the way: Disable Orchestrator App login aka Basic Auth (hosted as App Service Azure) - #10 by david.jonsson