SSO User Management
Overview
When Enterprise SSO is enabled, user accounts from your identity provider appear in PCD after the user's first SSO login. These SSO users are managed differently from local users, and the Settings > Tenants and Users > Users page reflects this separation.
Local Users and SSO Users Tabs
The Users page organizes users into two tabs:
Local Users
Users created directly in PCD
Edit, Enable, Disable, Delete, Manage Quotas
SSO Users
Users who have authenticated via your enterprise identity provider
Manage Quotas only
Why SSO users have restricted actions: SSO user accounts are owned by your identity provider. Editing, enabling, disabling, or deleting them through PCD is not supported because those changes must be made in the identity provider. Deprovisioning an SSO user requires removing or disabling the account in your IdP; the next time that user attempts to log in, access will be denied.
Managing Quotas for SSO Users
You can manage resource quotas for SSO users from the SSO Users tab, the same way you manage quotas for local users:
Navigate to Settings > Tenants and Users > Users.
Select the SSO Users tab.
Select the user.
Choose Manage Quotas.
Adjust the quota values and select Save.
Tenant Membership for SSO Users
SSO users are not listed in the user selection when creating or editing a tenant. Tenant membership for SSO users is controlled through SAML group mappings:
Navigate to Settings > Enterprise SSO > SAML Groups.
Create or edit a SAML group mapping.
Under Tenants & Roles, assign the tenant and role for members of that IdP group.
When an SSO user logs in, PCD evaluates the SAML group mappings and assigns tenant membership and roles based on the user's IdP group membership. See RBAC Roles and Permissions for how role inheritance from SAML groups works.
Related Pages
Enterprise SSO: overview of SSO setup and supported identity providers
RBAC Roles and Permissions: how roles are assigned via SAML group mappings
SSO Troubleshooting Guide: diagnosing login failures and authorization issues
Last updated
Was this helpful?