From ecb716066c976d229b7927697700d8ab4e9dfead Mon Sep 17 00:00:00 2001
From: Bryan Frimin <bryan@getprobo.com>
Date: Mon, 29 Dec 2025 11:59:25 +0100
Subject: [PATCH] Put enforcement policy to optional when SAML domain is
 verfied

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
---
 pkg/iam/saml_domain_verifier.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkg/iam/saml_domain_verifier.go b/pkg/iam/saml_domain_verifier.go
index f836d0af8..b5f294533 100644
--- a/pkg/iam/saml_domain_verifier.go
+++ b/pkg/iam/saml_domain_verifier.go
@@ -154,6 +154,7 @@ func (v *SAMLDomainVerifier) tryVerifyDomain(ctx context.Context, configID gid.G
 			now := time.Now()
 			config.DomainVerificationToken = nil
 			config.DomainVerifiedAt = &now
+			config.EnforcementPolicy = coredata.SAMLEnforcementPolicyOptional
 			config.UpdatedAt = now
 
 			scope := coredata.NewScopeFromObjectID(config.OrganizationID)