Office 365 single sign-on (SSO) integration with Wrike accounts is currently set up where if anyone signs in via O365, they are automatically added as a regular user to the account tied to the Azure Active Directory (AD). This poses a problem for groups within larger corporations using Wrike in terms of paid seat control and if multiple groups within the corporation want to have separate Wrike accounts. Due to this issue, we had to block Wrike from O365 SSO and as a result, we are limited in terms what kind of content we can put into Wrike per company security policies.
There should be the ability to have multiple Wrike accounts per Azure AD and then require people it to send a join request instead of automatically adding themselves as paid users. A competitor called Smartsheet has this functionality and only seems fitting that Wrike should be able to as well.