Enterprises can have some users configured to natively login and other users configured to use SSO, separated by Node. The Keeper Admin Console also has a role policy that can allow SSO users to also create a Master Password for logging in offline.