Function hasSSOAccess

apps/sim/lib/billing/core/subscription.ts:480–491

(userId: string)

 * In non-production environments, returns true for convenience.
 */
export async function hasSSOAccess(userId: string): Promise<boolean> {
  try {
    if (isSsoEnabled && !isHosted) {
      return true
    }

    return isEnterpriseOrgAdminOrOwner(userId)
  } catch (error) {
    logger.error('Error checking SSO access', { error, userId })
    return false
  }
}

/**
 * Check whether a workspace is entitled to the Access Control (Permission Groups)