Summary
Without auto-provisioning, when a user authenticates successfully against your server (IdP) but doesn’t have an existing user account inside Silktide, they will be informed they don’t have an account and the login will fail.
With auto-provisioning enabled, the user account would be created for them automatically, granting immediate access to the system.
How do permissions work for auto-provisioned users?
When you initially set up auto-provisioning you’ll need to decide which permission role(s) that auto-provisioned users should be assigned to automatically.
Auto-provisioning can work for all setups. If a granular permission model is required for your organization, we recommend sending all auto-provisioned users into a special role that has restricted access. This will allow you to identify the new users and assign them to appropriate roles without granting them unnecessary access on the first login.