diff --git a/containers/backupchecks/src/templates/documentation/settings/entra-sso.html b/containers/backupchecks/src/templates/documentation/settings/entra-sso.html
index 662c5ff..14a5f90 100644
--- a/containers/backupchecks/src/templates/documentation/settings/entra-sso.html
+++ b/containers/backupchecks/src/templates/documentation/settings/entra-sso.html
@@ -4,6 +4,12 @@
 <h1>Microsoft Entra SSO</h1>
 <p>Use Microsoft Entra ID (Azure AD) to let users sign in with their Microsoft account.</p>
 
+<div class="doc-callout doc-callout-warning">
+  <strong>Status: Untested in Backupchecks.</strong>
+  This SSO implementation has not yet been end-to-end validated in Backupchecks itself.
+  Treat this page as implementation guidance for future rollout, not as a confirmed production setup.
+</div>
+
 <div class="doc-callout doc-callout-info">
   <strong>Scope:</strong> this page explains the setup for Backupchecks and Microsoft Entra.
   It does not replace your internal identity/security policies.