Step 3 - Set the SSO Defaults
When SSO has been configured for your tenancy, the Single Sign-On Defaults section is displayed on the SAML SSO page.
This section lets you specify the default roles and groups that are assigned to new users created through a third party identity provider.
By default new users will be assigned the ONE User Role, and added to the Default Group Group.
Note: It is your responsibility to maintain the default group assigned to new users. If the group is deleted from the Groups page, the SSO default group is not automatically updated.
You can also set the default email address. By default new users will be assigned this email address if no email address value is returned as part of the SSO authentication. If a default email address is not set, it is mandatory for the email address to be returned as part of the SSO authentication.
