I read in another thread Admin role gets bypass sso. How do I turn that off? I don't want to have to have to remember to go into marketo to disable an account of someone who left the company, even if they were a marketo admin.
You should check Restrict User Login to SSO Only article on the product documentation. Do you have the Admin > Login Settings > "Require SSO" option tick marked? Also, make sure you don't have selected the "Bypass Single Sign-On option" in the user role. With this option check-marked, it'd override the "Require SSO" setting.