Do I need SSO if I'm only adding one enterprise customer?

Not necessarily.

If you’re only adding one enterprise customer, you typically don’t need full SSO on day one unless that customer specifically requires it. Many enterprise customers will still be fine with:

• Email/password accounts
• Magic links
• MFA
• Manual user provisioning

You should consider SSO if any of these are true:

• The customer explicitly asked for it in procurement/security review
• Their IT team requires centralized identity management
• You expect more enterprise customers soon
• You want to support SCIM/user provisioning and enterprise lifecycle management
• You’re closing a larger deal where SSO is a common checklist item

A practical rule:

• One customer, no explicit SSO requirement: probably skip for now
• Enterprise customer asking for security controls / centralized login: likely plan for it
• If it helps you close the deal: implement it, even if it’s only one customer

Also, if you do add it, you might not need a heavyweight setup immediately. A lighter approach is to support one IdP first, such as:

• Google Workspace
• Okta
• Microsoft Entra ID (Azure AD)

If you want, I can help you decide based on:

1. your customer’s size and IT maturity,
2. your current auth setup, and
3. whether they’ve actually requested SSO in writing.