Configure this from Admin Settings → Access → Single Sign-on, in a provider’s
Manage user provisioning modal. Requires administrator privileges.
Just-in-time provisioning
Open the ⋯ menu for your provider and choose Manage user provisioning. In the Provisioning step you’ll find the JIT toggle:- Create new identities during first-time authentication — when on, a Generate account is created the first time a user signs in through this provider, so you don’t have to invite them in advance.
Map groups to teams
Add a mapping
Choose an identity-provider group and the Generate team it should map to, then click Add.
Repeat for each group you want to map.