{"record":{"id":"11dcbc73ac1f21bd","repo":"bitwarden/server","slug":"your-organization-single-sign-on-settings-prevent","errorCode":null,"errorMessage":"Your organization single sign-on settings prevent you from leaving.","messagePattern":"Your organization single sign-on settings prevent you from leaving\\.","errorType":"exception","errorClass":"BadRequestException","httpStatus":400,"severity":"error","filePath":"src/Api/AdminConsole/Controllers/OrganizationsController.cs","lineNumber":277,"sourceCode":"\n        var result = await _organizationService.AdjustStorageAsync(orgIdGuid, model.StorageGbAdjustment.Value);\n        return new PaymentResponseModel { Success = true, PaymentIntentClientSecret = result };\n    }\n\n    [HttpPost(\"{id}/leave\")]\n    public async Task Leave(Guid id)\n    {\n        if (!await _currentContext.OrganizationUser(id))\n        {\n            throw new NotFoundException();\n        }\n\n        var user = await _userService.GetUserByPrincipalAsync(User);\n\n        var ssoConfig = await _ssoConfigRepository.GetByOrganizationIdAsync(id);\n        if (ssoConfig?.GetData()?.MemberDecryptionType == MemberDecryptionType.KeyConnector && user.UsesKeyConnector)\n        {\n            throw new BadRequestException(new LeaveOrgSsoBlockedError().Message);\n        }\n\n        if ((await _userService.GetOrganizationsClaimingUserAsync(user.Id)).Any(x => x.Id == id))\n        {\n            throw new BadRequestException(new LeaveOrgClaimedAccountError().Message);\n        }\n\n        await _removeOrganizationUserCommand.UserLeaveAsync(id, user.Id);\n    }\n\n    [HttpDelete(\"{id}\")]\n    public async Task Delete(string id, [FromBody] SecretVerificationRequestModel model)\n    {\n        var orgIdGuid = new Guid(id);\n        if (!await _currentContext.OrganizationOwner(orgIdGuid))\n        {\n            throw new NotFoundException();\n        }","sourceCodeStart":259,"sourceCodeEnd":295,"githubUrl":"https://github.com/bitwarden/server/blob/e93b962371d80964556f5590c6615f5160a437a1/src/Api/AdminConsole/Controllers/OrganizationsController.cs#L259-L295","documentation":"Error \"Your organization single sign-on settings prevent you from leaving.\" thrown in bitwarden/server.","triggerScenarios":"Thrown when a user tries to leave an organization whose single sign-on policy (e.g., SSO-required / claimed account settings) forbids members from leaving on their own.","commonSituations":"See trigger scenarios.","solutions":["Ask an organization owner or admin to remove you from the organization instead of leaving it yourself.","Have an admin disable the SSO requirement or adjust the SSO policy if leaving should be permitted."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"e93b962371d80964556f5590c6615f5160a437a1","analyzedAt":"2026-08-13T14:22:19.382Z","schemaVersion":2},"datasetVersion":"2026-08-13T19:17:28.613Z"}