Aside from having SSO, suggest having an extra layer like multi-factor authentication (MFA/2FA). The users can access the platform without Single Sign On or AD integration but at least it can have additional authentication aside from password comp...