bitwarden/server · error · BadRequestException

Your organization single sign-on settings prevent you from l

Error message

Your organization single sign-on settings prevent you from leaving.

What it means

Error "Your organization single sign-on settings prevent you from leaving." thrown in bitwarden/server.

Source

Thrown at src/Api/AdminConsole/Controllers/OrganizationsController.cs:277

        var result = await _organizationService.AdjustStorageAsync(orgIdGuid, model.StorageGbAdjustment.Value);
        return new PaymentResponseModel { Success = true, PaymentIntentClientSecret = result };
    }

    [HttpPost("{id}/leave")]
    public async Task Leave(Guid id)
    {
        if (!await _currentContext.OrganizationUser(id))
        {
            throw new NotFoundException();
        }

        var user = await _userService.GetUserByPrincipalAsync(User);

        var ssoConfig = await _ssoConfigRepository.GetByOrganizationIdAsync(id);
        if (ssoConfig?.GetData()?.MemberDecryptionType == MemberDecryptionType.KeyConnector && user.UsesKeyConnector)
        {
            throw new BadRequestException(new LeaveOrgSsoBlockedError().Message);
        }

        if ((await _userService.GetOrganizationsClaimingUserAsync(user.Id)).Any(x => x.Id == id))
        {
            throw new BadRequestException(new LeaveOrgClaimedAccountError().Message);
        }

        await _removeOrganizationUserCommand.UserLeaveAsync(id, user.Id);
    }

    [HttpDelete("{id}")]
    public async Task Delete(string id, [FromBody] SecretVerificationRequestModel model)
    {
        var orgIdGuid = new Guid(id);
        if (!await _currentContext.OrganizationOwner(orgIdGuid))
        {
            throw new NotFoundException();
        }

View on GitHub (pinned to e93b962371)

Solutions

1. Ask an organization owner or admin to remove you from the organization instead of leaving it yourself.
2. Have an admin disable the SSO requirement or adjust the SSO policy if leaving should be permitted.

When it happens

Trigger: Thrown when a user tries to leave an organization whose single sign-on policy (e.g., SSO-required / claimed account settings) forbids members from leaving on their own.

Common situations: See trigger scenarios.

AI-assisted analysis of bitwarden/server@e93b962371 (2026-08-13). Data as JSON: /api/errors/11dcbc73ac1f21bd. Report an issue: GitHub.