Without auto-provisioning, when a user authenticates successfully against your server (IdP) but doesn’t have an existing user account inside Silktide, they will be informed they don’t have an account and the login will fail.

With auto-provisioning enabled, the user account would be created for them automatically, granting immediate access to the system.

When you initially set up auto-provisioning you’ll need to decide which permission role(s) that auto-provisioned users should be assigned to automatically.

Auto-provisioning can work for all setups. If a granular permission model is required for your organization, we recommend sending all auto-provisioned users into a special role that has restricted access. This will allow you to identify the new users and assign them to appropriate roles without granting them unnecessary access on the first login.

There may be a situation where you want to add a batch of users that need more complex permissions than the auto-provisioning process can apply. You could wait for these users to first log in, which would create their user account that could then be adjusted as needed. You could also go ahead and create those users in Silktide with their appropriate permissions, including whatever role assignments would come from the auto-provisioning process. When these users log in for the first time, they'll be matched up with the user account you already made and set up.