Users that have been configured directly in Coalesce will be able to login with a username/password even if SSO has been enabled so long as their Coalesce-native user record remains active. If you do not wish to allow username/password-based authentication, you will need to disable and/or delete the Coalesce-native User records.
See our article on user management for more information.
Still need assistance? Request support.