diff --git a/packages/sso/src/index.ts b/packages/sso/src/index.ts
index ad9d921630..3d5d7a7c5d 100644
--- a/packages/sso/src/index.ts
+++ b/packages/sso/src/index.ts
@@ -589,6 +589,26 @@ export const sso = (options?: SSOOptions) => {
 							message: "Invalid issuer. Must be a valid URL",
 						});
 					}
+					if (ctx.body.organizationId) {
+						const organization = await ctx.context.adapter.findOne({
+							model: "member",
+							where: [
+								{
+									field: "userId",
+									value: user.id,
+								},
+								{
+									field: "organizationId",
+									value: ctx.body.organizationId,
+								},
+							],
+						});
+						if (!organization) {
+							throw new APIError("BAD_REQUEST", {
+								message: "You are not a member of the organization",
+							});
+						}
+					}
 					const provider = await ctx.context.adapter.create<
 						Record<string, any>,
 						SSOProvider