Out of curiosity, has anyone used the single sign on feature? what are your opinions on it? any pros & cons?

We use the SAML version. It seems to work fine. Administrators still sign in via system.netsuite.com and don't have the option to use SSO, which I think makes sense. It can be kind of annoying testing role changes though because of that because you have to sign into that role via SSO, which boots you out of your Admin login, so you have to keep signing in. That's really the only con I can think of. But again, it seems to work fine. We've not had any trouble with it.

Hey, thank you for the help

Sure, though note that I'm am much more functional than technical, so if your questions are about technical specs, I likely won't be able to answer much.

We use SAML with Azure AD, It works very well. Pros are NetSuite team doesn't get bothered with user password resets, users don't have to manage another password, and off-boarding users happens automatically which makes our auditors happy. No cons I'm aware off

We have SAML with Azure AD for production but cannot seem to get the same SAML setup for our Sandboxes.

@PlanetJupiter works well for us in sandboxes. We just need to reupload the IDP file post refresh https://archive.netsuiteprofessionals.com/t/13886767/has-anyone-here-implemented-azure-sso-for-an-account-across-#f74750c2-6807-41af-bbbe-ffb99fd7d242

Via google IDP its ok for production accounts but they do not seem to allow the sandboxes to run off of the same so I think a lot of your mileage depends on IDP/AD providers. I would still recommend it though, works well once running.